b29f475ff9973b9540c42126f99c37e35c5a1017ce14d4dbe7ecddb9a3c8be49 | Triage

Sharing

General

Target

b29f475ff9973b9540c42126f99c37e35c5a1017ce14d4dbe7ecddb9a3c8be49
Size

1.1MB
Sample

240522-19d1maba4t
MD5

f52fe11c4bce7147a8ee6ef67218b00b
SHA1

418492ccf8b82e5521813e1e5c9267b540de5229
SHA256

b29f475ff9973b9540c42126f99c37e35c5a1017ce14d4dbe7ecddb9a3c8be49
SHA512

256ec3999b6e25cb244056ecc386421fb817e1e86c2c7b93f331f925bb90f95bd80b57b844c85ac9d27291c5e8d15d8c41f041be91ff58c753edd9b8d4ffe839
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Q2:CcaClSFlG4ZM7QzMd

Score

7^/10

Malware Config

Targets

- Target
  
  b29f475ff9973b9540c42126f99c37e35c5a1017ce14d4dbe7ecddb9a3c8be49
- Size
  
  1.1MB
- MD5
  
  f52fe11c4bce7147a8ee6ef67218b00b
- SHA1
  
  418492ccf8b82e5521813e1e5c9267b540de5229
- SHA256
  
  b29f475ff9973b9540c42126f99c37e35c5a1017ce14d4dbe7ecddb9a3c8be49
- SHA512
  
  256ec3999b6e25cb244056ecc386421fb817e1e86c2c7b93f331f925bb90f95bd80b57b844c85ac9d27291c5e8d15d8c41f041be91ff58c753edd9b8d4ffe839
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Q2:CcaClSFlG4ZM7QzMd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2