afa118c72b12db14fd7ab526a2e9018ea68cabfe1107202fa6ee43e5d927e124 | Triage

Sharing

General

Target

afa118c72b12db14fd7ab526a2e9018ea68cabfe1107202fa6ee43e5d927e124
Size

56KB
Sample

240523-cc49jshg45
MD5

004c9a309659a4fdcf25aae8083e4da2
SHA1

88483a4555ea6ab2609049863b0dac24cb8056dc
SHA256

afa118c72b12db14fd7ab526a2e9018ea68cabfe1107202fa6ee43e5d927e124
SHA512

1cdbb0aaa75c9d23359ca6ea9db4a70c2a69dd9125e55be6365eef065804f6edc1d5e3a82157d576bba316f7e65a38b71ae783f5c2fe876410bb15a8d2d3fd6b
SSDEEP

768:EyW1yBtObv0U/xwPp0EoooiYECG2nZF5sZVcmxSHZFQQm:24Bobv7aB0EooYEC3rUVcYEZF9m

Score

7^/10

Malware Config

Targets

- Target
  
  afa118c72b12db14fd7ab526a2e9018ea68cabfe1107202fa6ee43e5d927e124
- Size
  
  56KB
- MD5
  
  004c9a309659a4fdcf25aae8083e4da2
- SHA1
  
  88483a4555ea6ab2609049863b0dac24cb8056dc
- SHA256
  
  afa118c72b12db14fd7ab526a2e9018ea68cabfe1107202fa6ee43e5d927e124
- SHA512
  
  1cdbb0aaa75c9d23359ca6ea9db4a70c2a69dd9125e55be6365eef065804f6edc1d5e3a82157d576bba316f7e65a38b71ae783f5c2fe876410bb15a8d2d3fd6b
- SSDEEP
  
  768:EyW1yBtObv0U/xwPp0EoooiYECG2nZF5sZVcmxSHZFQQm:24Bobv7aB0EooYEC3rUVcYEZF9m
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2