5299a1e75fae43d47614202e8928bae0f2c05447346c4af222e9bacb28ff3670 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5299a1e75fae43d47614202e8928bae0f2c05447346c4af222e9bacb28ff3670
Size

1.2MB
Sample

240503-1nfmbsad55
MD5

af260bc34666560cf73986e150485f2d
SHA1

6436a370d81d68cd102e76d53723f4d635c4930c
SHA256

5299a1e75fae43d47614202e8928bae0f2c05447346c4af222e9bacb28ff3670
SHA512

8e519120e8475b95611b31ff6a6ef70b08d2d74584897a559a28e07af0bea12eabc20b66ca896de6dc8cc9cdf3ee8776844cc876b4b1627ce5a1ce56beac4f18
SSDEEP

12288:d+67XR9JSSxvYGdodH/1CVc1CVIw/bBAJbM:d+6N986Y7twDWtM

Score

7^/10

Malware Config

Targets

- Target
  
  5299a1e75fae43d47614202e8928bae0f2c05447346c4af222e9bacb28ff3670
- Size
  
  1.2MB
- MD5
  
  af260bc34666560cf73986e150485f2d
- SHA1
  
  6436a370d81d68cd102e76d53723f4d635c4930c
- SHA256
  
  5299a1e75fae43d47614202e8928bae0f2c05447346c4af222e9bacb28ff3670
- SHA512
  
  8e519120e8475b95611b31ff6a6ef70b08d2d74584897a559a28e07af0bea12eabc20b66ca896de6dc8cc9cdf3ee8776844cc876b4b1627ce5a1ce56beac4f18
- SSDEEP
  
  12288:d+67XR9JSSxvYGdodH/1CVc1CVIw/bBAJbM:d+6N986Y7twDWtM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2