5412b23a900fbd150e6a6a1bb4ac29c203cc3057683e2cab0a6c3cd9dbdcc12b | Triage

Sharing

General

Target

5412b23a900fbd150e6a6a1bb4ac29c203cc3057683e2cab0a6c3cd9dbdcc12b
Size

658KB
Sample

240516-2hjmgabg91
MD5

455d0abdf0c576699d696dbe0b4cc58d
SHA1

ab852ba5ef1da9b7e45f8528c2c92eabb4ac6ad7
SHA256

5412b23a900fbd150e6a6a1bb4ac29c203cc3057683e2cab0a6c3cd9dbdcc12b
SHA512

812e4a036b2bae31426f2e99e2519c0c4381d10646d4e9cd56cbc2d3b8e931a1e86df4daa223222d5831bb071fe8f8e75560b2c34b4338ddf299426f00c91ec4
SSDEEP

12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwI:w+6N986Y7DusQHNd1KidKjttRYLwI

Score

7^/10

Malware Config

Targets

- Target
  
  5412b23a900fbd150e6a6a1bb4ac29c203cc3057683e2cab0a6c3cd9dbdcc12b
- Size
  
  658KB
- MD5
  
  455d0abdf0c576699d696dbe0b4cc58d
- SHA1
  
  ab852ba5ef1da9b7e45f8528c2c92eabb4ac6ad7
- SHA256
  
  5412b23a900fbd150e6a6a1bb4ac29c203cc3057683e2cab0a6c3cd9dbdcc12b
- SHA512
  
  812e4a036b2bae31426f2e99e2519c0c4381d10646d4e9cd56cbc2d3b8e931a1e86df4daa223222d5831bb071fe8f8e75560b2c34b4338ddf299426f00c91ec4
- SSDEEP
  
  12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwI:w+6N986Y7DusQHNd1KidKjttRYLwI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2