c6e3420fb3fb07eb4c77246a7e6396182c7cdf02dce42af92f66adf0616910e4 | Triage

Sharing

General

Target

c6e3420fb3fb07eb4c77246a7e6396182c7cdf02dce42af92f66adf0616910e4
Size

45KB
Sample

240522-c794aaaa3y
MD5

94d73982c99f2ebca9dc7dd3d2d8a873
SHA1

6dfdc38d9c9c1e077d7b3748aa00d1404df2cc48
SHA256

c6e3420fb3fb07eb4c77246a7e6396182c7cdf02dce42af92f66adf0616910e4
SHA512

94a53071438a6ebbb9cc79384d596723f6f3ae094367f89290a1bba9583717016c2f4c9c599048685b983c74f3c6d33041f83c2c0cc5352bac4e2c111ef5b249
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxQ:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X5

Score

7^/10

Malware Config

Targets

- Target
  
  c6e3420fb3fb07eb4c77246a7e6396182c7cdf02dce42af92f66adf0616910e4
- Size
  
  45KB
- MD5
  
  94d73982c99f2ebca9dc7dd3d2d8a873
- SHA1
  
  6dfdc38d9c9c1e077d7b3748aa00d1404df2cc48
- SHA256
  
  c6e3420fb3fb07eb4c77246a7e6396182c7cdf02dce42af92f66adf0616910e4
- SHA512
  
  94a53071438a6ebbb9cc79384d596723f6f3ae094367f89290a1bba9583717016c2f4c9c599048685b983c74f3c6d33041f83c2c0cc5352bac4e2c111ef5b249
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxQ:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2