51e9ff1ebdcab586db924e6d827e7f892dd5a2602141dbafc6449dfe5b1320d3 | Triage

Sharing

General

Target

51e9ff1ebdcab586db924e6d827e7f892dd5a2602141dbafc6449dfe5b1320d3
Size

1.1MB
Sample

240521-necsvsbf44
MD5

0701807d60fd1ab688fb854b8e8faf1c
SHA1

0b706f92f12fe19ec30cb338c33dfd3bbc59aa84
SHA256

51e9ff1ebdcab586db924e6d827e7f892dd5a2602141dbafc6449dfe5b1320d3
SHA512

1970ae2ee71dbbdae317cd7614c44c525feef918268d377f01d6c242fc0322666df2f1fe5f861be432ffef258b6c7bf0b0f8f6d5f1d2e56bdee3f5ec49bb2d75
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QM:acallSllG4ZM7QzML

Score

7^/10

Malware Config

Targets

- Target
  
  51e9ff1ebdcab586db924e6d827e7f892dd5a2602141dbafc6449dfe5b1320d3
- Size
  
  1.1MB
- MD5
  
  0701807d60fd1ab688fb854b8e8faf1c
- SHA1
  
  0b706f92f12fe19ec30cb338c33dfd3bbc59aa84
- SHA256
  
  51e9ff1ebdcab586db924e6d827e7f892dd5a2602141dbafc6449dfe5b1320d3
- SHA512
  
  1970ae2ee71dbbdae317cd7614c44c525feef918268d377f01d6c242fc0322666df2f1fe5f861be432ffef258b6c7bf0b0f8f6d5f1d2e56bdee3f5ec49bb2d75
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QM:acallSllG4ZM7QzML
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2