af641ea97e20f5c85b72c8dea71a831f004e0cad6a976cc9833d444e510c0430 | Triage

Sharing

General

Target

af641ea97e20f5c85b72c8dea71a831f004e0cad6a976cc9833d444e510c0430
Size

5KB
Sample

240523-ccp5mahg26
MD5

f53cf2cb015fdd0be9a037ec949bf93a
SHA1

26aacff9525ccc50216a8d71a45dfbee37f6b2a5
SHA256

af641ea97e20f5c85b72c8dea71a831f004e0cad6a976cc9833d444e510c0430
SHA512

bc044db33ce7934413857a4d7d6f23db0c25e244e40dfd45dd263d402c898076e24d966e37aab88404c3773b947b282a58c03903d4a85127508434a6b0cf48ef
SSDEEP

48:qvECf6Am8RB/G9B8Lw1qNnZ1rsHB/VnC/RAxUl2CS70ALNx:nCTxLw8FNnZuHnnwR2Ul2ClAhx

Score

7^/10

Malware Config

Targets

- Target
  
  af641ea97e20f5c85b72c8dea71a831f004e0cad6a976cc9833d444e510c0430
- Size
  
  5KB
- MD5
  
  f53cf2cb015fdd0be9a037ec949bf93a
- SHA1
  
  26aacff9525ccc50216a8d71a45dfbee37f6b2a5
- SHA256
  
  af641ea97e20f5c85b72c8dea71a831f004e0cad6a976cc9833d444e510c0430
- SHA512
  
  bc044db33ce7934413857a4d7d6f23db0c25e244e40dfd45dd263d402c898076e24d966e37aab88404c3773b947b282a58c03903d4a85127508434a6b0cf48ef
- SSDEEP
  
  48:qvECf6Am8RB/G9B8Lw1qNnZ1rsHB/VnC/RAxUl2CS70ALNx:nCTxLw8FNnZuHnnwR2Ul2ClAhx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2