b4f0731bb86b637b94e63ad020dbf717e3d95c98b5eab101a1dfe2a0e8b0844e | Triage

Sharing

General

Target

b4f0731bb86b637b94e63ad020dbf717e3d95c98b5eab101a1dfe2a0e8b0844e
Size

7KB
Sample

240516-cvscpsgc5z
MD5

49fa3a424cd07ddb37a9b6d126811fd4
SHA1

302442a40938b576561aaec620fec573e1b3171d
SHA256

b4f0731bb86b637b94e63ad020dbf717e3d95c98b5eab101a1dfe2a0e8b0844e
SHA512

3aa650feef70422d7a731bda4b2d63e49d1075f9526c620cfc46faa7c645ab3211dc4c12750cb963a2169e6480cbe8171ef19581613d2cfb598e657100043fcb
SSDEEP

96:DJOqSXslYquHnnwR2UM2ClAhx/Jh8oeKcRgc1gqt:XS8AnwR2FBALJ2oeHRb1Dt

Score

7^/10

Malware Config

Targets

- Target
  
  b4f0731bb86b637b94e63ad020dbf717e3d95c98b5eab101a1dfe2a0e8b0844e
- Size
  
  7KB
- MD5
  
  49fa3a424cd07ddb37a9b6d126811fd4
- SHA1
  
  302442a40938b576561aaec620fec573e1b3171d
- SHA256
  
  b4f0731bb86b637b94e63ad020dbf717e3d95c98b5eab101a1dfe2a0e8b0844e
- SHA512
  
  3aa650feef70422d7a731bda4b2d63e49d1075f9526c620cfc46faa7c645ab3211dc4c12750cb963a2169e6480cbe8171ef19581613d2cfb598e657100043fcb
- SSDEEP
  
  96:DJOqSXslYquHnnwR2UM2ClAhx/Jh8oeKcRgc1gqt:XS8AnwR2FBALJ2oeHRb1Dt
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2