d0ececbd22a72b4339010b3452cc636d7a607770d9513b7e5cb84f4e77296ec1 | Triage

Sharing

General

Target

d0ececbd22a72b4339010b3452cc636d7a607770d9513b7e5cb84f4e77296ec1
Size

224KB
Sample

240501-d45vtshb47
MD5

57510881b5db18984454b393aeabc5e5
SHA1

4725dccda7fe850c69c0bb5836dc705d74ca767c
SHA256

d0ececbd22a72b4339010b3452cc636d7a607770d9513b7e5cb84f4e77296ec1
SHA512

b97ae59328d48afac38dd7e0b475d4b0f9b995e94fc4a7d88459af0ef6bd36ee92fa75a1867b2066233ebd4e0ce07f4d79c964db2ce47730b8d329774684c475
SSDEEP

3072:GzaK+RD/Z+hCjG8G3GbGVGBGfGuGxGWYcrf6KadU:Gzj+tIAYcD6Kad

Score

7^/10

Malware Config

Targets

- Target
  
  d0ececbd22a72b4339010b3452cc636d7a607770d9513b7e5cb84f4e77296ec1
- Size
  
  224KB
- MD5
  
  57510881b5db18984454b393aeabc5e5
- SHA1
  
  4725dccda7fe850c69c0bb5836dc705d74ca767c
- SHA256
  
  d0ececbd22a72b4339010b3452cc636d7a607770d9513b7e5cb84f4e77296ec1
- SHA512
  
  b97ae59328d48afac38dd7e0b475d4b0f9b995e94fc4a7d88459af0ef6bd36ee92fa75a1867b2066233ebd4e0ce07f4d79c964db2ce47730b8d329774684c475
- SSDEEP
  
  3072:GzaK+RD/Z+hCjG8G3GbGVGBGfGuGxGWYcrf6KadU:Gzj+tIAYcD6Kad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2