890a8e02dedd9c4c9c88cab3b94ebbcb02f1562194f4e0112f64a848eeb05a0f | Triage

Sharing

General

Target

890a8e02dedd9c4c9c88cab3b94ebbcb02f1562194f4e0112f64a848eeb05a0f
Size

23KB
Sample

240523-abf48aeb69
MD5

08794ab10eece93350299f50dece866f
SHA1

759cde214a1ccfd25a0873e7564247fc78d6fdf4
SHA256

890a8e02dedd9c4c9c88cab3b94ebbcb02f1562194f4e0112f64a848eeb05a0f
SHA512

11c1a7be2a36ddc64e3f769468448cec6436946faa89ab1dca8bf9bfb7e6be6838636258ae44732b74273750a93dfc6ef5797f07f5867deb09a4a8b6245810c7
SSDEEP

192:aEziYIk7VQ5ANWF5shCC0dbYzfmuPMoDlUvDje2A2z4puuLTEef3sfrpEBgOWtWV:aENVb0db0+69lCS2N4pkGkwZr

Score

7^/10

Malware Config

Targets

- Target
  
  890a8e02dedd9c4c9c88cab3b94ebbcb02f1562194f4e0112f64a848eeb05a0f
- Size
  
  23KB
- MD5
  
  08794ab10eece93350299f50dece866f
- SHA1
  
  759cde214a1ccfd25a0873e7564247fc78d6fdf4
- SHA256
  
  890a8e02dedd9c4c9c88cab3b94ebbcb02f1562194f4e0112f64a848eeb05a0f
- SHA512
  
  11c1a7be2a36ddc64e3f769468448cec6436946faa89ab1dca8bf9bfb7e6be6838636258ae44732b74273750a93dfc6ef5797f07f5867deb09a4a8b6245810c7
- SSDEEP
  
  192:aEziYIk7VQ5ANWF5shCC0dbYzfmuPMoDlUvDje2A2z4puuLTEef3sfrpEBgOWtWV:aENVb0db0+69lCS2N4pkGkwZr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2