ca56aabbd5d8bb5da71a599a495763584de30000c06d1cb12650be4447474e8a | Triage

Sharing

General

Target

ca56aabbd5d8bb5da71a599a495763584de30000c06d1cb12650be4447474e8a
Size

54KB
Sample

240504-dgeecsee63
MD5

2c383796cd6e990e191be8ee7a8f7b3e
SHA1

4eeb8c848316b2000cd9546551cbf30294ba2849
SHA256

ca56aabbd5d8bb5da71a599a495763584de30000c06d1cb12650be4447474e8a
SHA512

852d1f6a0a7bd54654cb5ef033c2b49b8bb5a58cb6735d3d9bf174049b57e9aff1af8a6875de14708faf795b0a27ac177b016e45b58207a3c9864e060890a4ae
SSDEEP

768:MApQr0fvdFJI341GxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7ZbN:MAaMJlBsh7pWezEPJB+OlbN

Score

7^/10

Malware Config

Targets

- Target
  
  ca56aabbd5d8bb5da71a599a495763584de30000c06d1cb12650be4447474e8a
- Size
  
  54KB
- MD5
  
  2c383796cd6e990e191be8ee7a8f7b3e
- SHA1
  
  4eeb8c848316b2000cd9546551cbf30294ba2849
- SHA256
  
  ca56aabbd5d8bb5da71a599a495763584de30000c06d1cb12650be4447474e8a
- SHA512
  
  852d1f6a0a7bd54654cb5ef033c2b49b8bb5a58cb6735d3d9bf174049b57e9aff1af8a6875de14708faf795b0a27ac177b016e45b58207a3c9864e060890a4ae
- SSDEEP
  
  768:MApQr0fvdFJI341GxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7ZbN:MAaMJlBsh7pWezEPJB+OlbN
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2