bd2946c372a63fc85a8318421662b280003dd322f6505ac6a7fa2d1ea9abf760 | Triage

Sharing

General

Target

bd2946c372a63fc85a8318421662b280003dd322f6505ac6a7fa2d1ea9abf760
Size

523KB
Sample

240523-cye7jsae9x
MD5

c9d89056b9638784dc1274c5383da512
SHA1

b00f1e2a9d0184c4deb6e8f9475298b00ba373ac
SHA256

bd2946c372a63fc85a8318421662b280003dd322f6505ac6a7fa2d1ea9abf760
SHA512

84aed8b9b7255dc32cf6f0a1be2014f8d22653f3f7cbb13fbcadeb95514bb0dea6a3ae03a085362fe6a94c9cc74c1504bbc4cb16997b5f2cb4a2836e7a622498
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx1:dqDAwl0xPTMiR9JSSxPUKYGdodHO

Score

7^/10

Malware Config

Targets

- Target
  
  bd2946c372a63fc85a8318421662b280003dd322f6505ac6a7fa2d1ea9abf760
- Size
  
  523KB
- MD5
  
  c9d89056b9638784dc1274c5383da512
- SHA1
  
  b00f1e2a9d0184c4deb6e8f9475298b00ba373ac
- SHA256
  
  bd2946c372a63fc85a8318421662b280003dd322f6505ac6a7fa2d1ea9abf760
- SHA512
  
  84aed8b9b7255dc32cf6f0a1be2014f8d22653f3f7cbb13fbcadeb95514bb0dea6a3ae03a085362fe6a94c9cc74c1504bbc4cb16997b5f2cb4a2836e7a622498
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx1:dqDAwl0xPTMiR9JSSxPUKYGdodHO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2