66fbf094867a5c3910d6e244405d137ad2b535e64bdbe3050488843e4334a18f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66fbf094867a5c3910d6e244405d137ad2b535e64bdbe3050488843e4334a18f
Size

54KB
Sample

240505-aj4kgsgc4s
MD5

308f87500a861ab368efbd68eccac76f
SHA1

54f5922d0843f124e04ec12a5f80366bd19a6821
SHA256

66fbf094867a5c3910d6e244405d137ad2b535e64bdbe3050488843e4334a18f
SHA512

8cd7417c2a9977fc0fab9b4b677536f4f9806f436e471782847e0b2b8bed03497d603741b12bde2c7fd98da26f4db6ea209ac3ad89c2ccff201841e19a46e6c3
SSDEEP

768:MApQr0DWvdFJI34HGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7v/I9:MAaJJlTsh7pWezEPJB+OjI9

Score

7^/10

Malware Config

Targets

- Target
  
  66fbf094867a5c3910d6e244405d137ad2b535e64bdbe3050488843e4334a18f
- Size
  
  54KB
- MD5
  
  308f87500a861ab368efbd68eccac76f
- SHA1
  
  54f5922d0843f124e04ec12a5f80366bd19a6821
- SHA256
  
  66fbf094867a5c3910d6e244405d137ad2b535e64bdbe3050488843e4334a18f
- SHA512
  
  8cd7417c2a9977fc0fab9b4b677536f4f9806f436e471782847e0b2b8bed03497d603741b12bde2c7fd98da26f4db6ea209ac3ad89c2ccff201841e19a46e6c3
- SSDEEP
  
  768:MApQr0DWvdFJI34HGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7v/I9:MAaJJlTsh7pWezEPJB+OjI9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2