cd507579249bd3b16f057fb446e99a7c080c8e1c3f5c01c2bb98d53b6c0d51d2 | Triage

Sharing

General

Target

cd507579249bd3b16f057fb446e99a7c080c8e1c3f5c01c2bb98d53b6c0d51d2
Size

1.1MB
Sample

240520-z5qcesha8x
MD5

de5e2c6c16f33a6c144ff3f8b16129df
SHA1

3010939f37582ff7e417c5c6542261f0d3667dc4
SHA256

cd507579249bd3b16f057fb446e99a7c080c8e1c3f5c01c2bb98d53b6c0d51d2
SHA512

618f126a1e38ff4c8eee3daea1ebc1bdb6cb14e6e9ec3964b6337e74b9efcbfdbb1d4e880fbe7859d90be45c5bd2f56ef81f35389597859ae359f49784901e1d
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QI:acallSllG4ZM7QzMf

Score

7^/10

Malware Config

Targets

- Target
  
  cd507579249bd3b16f057fb446e99a7c080c8e1c3f5c01c2bb98d53b6c0d51d2
- Size
  
  1.1MB
- MD5
  
  de5e2c6c16f33a6c144ff3f8b16129df
- SHA1
  
  3010939f37582ff7e417c5c6542261f0d3667dc4
- SHA256
  
  cd507579249bd3b16f057fb446e99a7c080c8e1c3f5c01c2bb98d53b6c0d51d2
- SHA512
  
  618f126a1e38ff4c8eee3daea1ebc1bdb6cb14e6e9ec3964b6337e74b9efcbfdbb1d4e880fbe7859d90be45c5bd2f56ef81f35389597859ae359f49784901e1d
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QI:acallSllG4ZM7QzMf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2