373fdb430fc00afee35361c9db71610d771fe52d6dc3566264615d083d29bf70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

373fdb430fc00afee35361c9db71610d771fe52d6dc3566264615d083d29bf70
Size

46KB
Sample

240520-zw91gagh8s
MD5

9ad8e05b157ee5b2eba76f2e33aed805
SHA1

63939c7a1c997561853578b6f5b10fc583125f9f
SHA256

373fdb430fc00afee35361c9db71610d771fe52d6dc3566264615d083d29bf70
SHA512

18ef6f376f948e4a85fabba459c364e9e2fab1c91b13ca5def7fdc569487c358712f7a799f21864e91bea72b99dd79d42304b60f7dd8378254f353f89f5ecd49
SSDEEP

384:KK+fKfzsqud1lubAK0s2y5dro54fwDskc0ZqNMAJqd:f+fAQqud1lKAKmy5hL0BAJqd

Score

7^/10

Malware Config

Targets

- Target
  
  373fdb430fc00afee35361c9db71610d771fe52d6dc3566264615d083d29bf70
- Size
  
  46KB
- MD5
  
  9ad8e05b157ee5b2eba76f2e33aed805
- SHA1
  
  63939c7a1c997561853578b6f5b10fc583125f9f
- SHA256
  
  373fdb430fc00afee35361c9db71610d771fe52d6dc3566264615d083d29bf70
- SHA512
  
  18ef6f376f948e4a85fabba459c364e9e2fab1c91b13ca5def7fdc569487c358712f7a799f21864e91bea72b99dd79d42304b60f7dd8378254f353f89f5ecd49
- SSDEEP
  
  384:KK+fKfzsqud1lubAK0s2y5dro54fwDskc0ZqNMAJqd:f+fAQqud1lKAKmy5hL0BAJqd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2