c19a79831c14775cf142f2b88daf1e9fcf3b11188dfcc472c28d05e9f0bc2be6 | Triage

Sharing

General

Target

c19a79831c14775cf142f2b88daf1e9fcf3b11188dfcc472c28d05e9f0bc2be6
Size

2.4MB
Sample

240430-jwh9rafh39
MD5

59577da5fa1d77da005b97bf44bf4c6f
SHA1

c5064679fe7934c7f86b2732d502191ba3559f55
SHA256

c19a79831c14775cf142f2b88daf1e9fcf3b11188dfcc472c28d05e9f0bc2be6
SHA512

d0bcc9d716cd75046b348b4a7cf867c1935a5e1725bb4539b6255d68bba461dbc3d845beb17e535615d92c1219f35cea7107d20f67589b8dbbb3a4dbc325a95e
SSDEEP

49152:yVz7tX+Eyrh2I1jvZSK1913lN21qrMSRkqrY3NEB1gh/aab/u2pTLg2wec+6:yVzEEmpr91VEQkoANEMYA/u2G46

Score

7^/10

Malware Config

Targets

- Target
  
  c19a79831c14775cf142f2b88daf1e9fcf3b11188dfcc472c28d05e9f0bc2be6
- Size
  
  2.4MB
- MD5
  
  59577da5fa1d77da005b97bf44bf4c6f
- SHA1
  
  c5064679fe7934c7f86b2732d502191ba3559f55
- SHA256
  
  c19a79831c14775cf142f2b88daf1e9fcf3b11188dfcc472c28d05e9f0bc2be6
- SHA512
  
  d0bcc9d716cd75046b348b4a7cf867c1935a5e1725bb4539b6255d68bba461dbc3d845beb17e535615d92c1219f35cea7107d20f67589b8dbbb3a4dbc325a95e
- SSDEEP
  
  49152:yVz7tX+Eyrh2I1jvZSK1913lN21qrMSRkqrY3NEB1gh/aab/u2pTLg2wec+6:yVzEEmpr91VEQkoANEMYA/u2G46
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2