81ab1e062714b3e4e61edbf3c1b10bd6d33085f737adc594f8929787b1df4e45 | Triage

Sharing

General

Target

81ab1e062714b3e4e61edbf3c1b10bd6d33085f737adc594f8929787b1df4e45
Size

520KB
Sample

240501-afgljsdb33
MD5

8b119d261cd658f4ab54f0b42424ccd8
SHA1

9b63f7d4e468f4a0e436dbdb5779ea07c04a4f26
SHA256

81ab1e062714b3e4e61edbf3c1b10bd6d33085f737adc594f8929787b1df4e45
SHA512

305d84858e717c5f5ae374a5bbd636c10d238d71a0b6d1bf91805031ef7b12ce81ab678cbb88ebba4f6acb38e678e3ef301191607e002c162cffaf1dc6d6e7e0
SSDEEP

3072:FCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx8:FqDAwl0xPTMiR9JSSxPUKYGdodH5

Score

7^/10

Malware Config

Targets

- Target
  
  81ab1e062714b3e4e61edbf3c1b10bd6d33085f737adc594f8929787b1df4e45
- Size
  
  520KB
- MD5
  
  8b119d261cd658f4ab54f0b42424ccd8
- SHA1
  
  9b63f7d4e468f4a0e436dbdb5779ea07c04a4f26
- SHA256
  
  81ab1e062714b3e4e61edbf3c1b10bd6d33085f737adc594f8929787b1df4e45
- SHA512
  
  305d84858e717c5f5ae374a5bbd636c10d238d71a0b6d1bf91805031ef7b12ce81ab678cbb88ebba4f6acb38e678e3ef301191607e002c162cffaf1dc6d6e7e0
- SSDEEP
  
  3072:FCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx8:FqDAwl0xPTMiR9JSSxPUKYGdodH5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2