16fe49982591614d9958d588826680eb10c9f49fd3a6ab314a01f0ea07cc7f5f | Triage

Sharing

General

Target

16fe49982591614d9958d588826680eb10c9f49fd3a6ab314a01f0ea07cc7f5f
Size

57KB
Sample

240507-xnxdasdb43
MD5

56080e25438a85d7240fc2ee1db5105c
SHA1

17ac3da26bed29f8f7f430f9c7b8c32376bf01d7
SHA256

16fe49982591614d9958d588826680eb10c9f49fd3a6ab314a01f0ea07cc7f5f
SHA512

83efb51a0f04fadfb0323d3e6c57eb0e1a3fdea232fcb2f26f8e9a10217a4dd92637c27364d7e4a48a077e1213d552e748460528eca537855c0e694d9c2352d4
SSDEEP

768:zTAiYUVaQDKVRRZgqq6UFFAKcls0ceVA1JYN2BDMSdzlQcjw:HAqamKVO6s0hVA1JH1MSdJQcjw

Score

7^/10

Malware Config

Targets

- Target
  
  16fe49982591614d9958d588826680eb10c9f49fd3a6ab314a01f0ea07cc7f5f
- Size
  
  57KB
- MD5
  
  56080e25438a85d7240fc2ee1db5105c
- SHA1
  
  17ac3da26bed29f8f7f430f9c7b8c32376bf01d7
- SHA256
  
  16fe49982591614d9958d588826680eb10c9f49fd3a6ab314a01f0ea07cc7f5f
- SHA512
  
  83efb51a0f04fadfb0323d3e6c57eb0e1a3fdea232fcb2f26f8e9a10217a4dd92637c27364d7e4a48a077e1213d552e748460528eca537855c0e694d9c2352d4
- SSDEEP
  
  768:zTAiYUVaQDKVRRZgqq6UFFAKcls0ceVA1JYN2BDMSdzlQcjw:HAqamKVO6s0hVA1JH1MSdJQcjw
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2