f4fe38f1dde79b4346d154d6c849d909adc7b8b9d90d7f15051f15de7992d85d | Triage

Sharing

General

Target

f4fe38f1dde79b4346d154d6c849d909adc7b8b9d90d7f15051f15de7992d85d
Size

56KB
Sample

240515-flr75aac3v
MD5

366b0b111f9c1e054e3a559e563d10aa
SHA1

c3538490abcd431ebf6f8450201d28d43b5ee668
SHA256

f4fe38f1dde79b4346d154d6c849d909adc7b8b9d90d7f15051f15de7992d85d
SHA512

308134b03ea1f4cb7eca1dc9e8d231ff64a9ae8e0afe58c292abe427d5e6f1dbf2409d9958e817fa13257a5faafea002013678e8126048bcf5c1ad91a5844683
SSDEEP

768:75wRI7PsED3VK2+ZtyOjgO4r9vFAg2rqrINT0qxn0GVkpkY/6Kf2OGx:+wYTjipvF2N0qxdkpkwZXGx

Score

7^/10

Malware Config

Targets

- Target
  
  f4fe38f1dde79b4346d154d6c849d909adc7b8b9d90d7f15051f15de7992d85d
- Size
  
  56KB
- MD5
  
  366b0b111f9c1e054e3a559e563d10aa
- SHA1
  
  c3538490abcd431ebf6f8450201d28d43b5ee668
- SHA256
  
  f4fe38f1dde79b4346d154d6c849d909adc7b8b9d90d7f15051f15de7992d85d
- SHA512
  
  308134b03ea1f4cb7eca1dc9e8d231ff64a9ae8e0afe58c292abe427d5e6f1dbf2409d9958e817fa13257a5faafea002013678e8126048bcf5c1ad91a5844683
- SSDEEP
  
  768:75wRI7PsED3VK2+ZtyOjgO4r9vFAg2rqrINT0qxn0GVkpkY/6Kf2OGx:+wYTjipvF2N0qxdkpkwZXGx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2