76e39d02c6c34807e150da912f4f82b8569402d206790fbc5a190d07484c5c53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76e39d02c6c34807e150da912f4f82b8569402d206790fbc5a190d07484c5c53
Size

10.3MB
Sample

240524-bgbblafg75
MD5

4af4cc16b286d71c990087d992238600
SHA1

b75cd39f5be9f72a8e1ec6bec9d776eb297534bd
SHA256

76e39d02c6c34807e150da912f4f82b8569402d206790fbc5a190d07484c5c53
SHA512

4ecab45c37045d1e6a95c5dfe4e5abf626c228ec5ec5a6cfb009af350ac74625aaa496bd5737e81f972670bad4d5185c54fbcab0bb8d0e33fbdbdfcef8f36eb6
SSDEEP

196608:CIWM3k88YqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOo75i:OM3k88D4F3e+biSDcQwM8uDupi

Score

7^/10

Malware Config

Targets

- Target
  
  76e39d02c6c34807e150da912f4f82b8569402d206790fbc5a190d07484c5c53
- Size
  
  10.3MB
- MD5
  
  4af4cc16b286d71c990087d992238600
- SHA1
  
  b75cd39f5be9f72a8e1ec6bec9d776eb297534bd
- SHA256
  
  76e39d02c6c34807e150da912f4f82b8569402d206790fbc5a190d07484c5c53
- SHA512
  
  4ecab45c37045d1e6a95c5dfe4e5abf626c228ec5ec5a6cfb009af350ac74625aaa496bd5737e81f972670bad4d5185c54fbcab0bb8d0e33fbdbdfcef8f36eb6
- SSDEEP
  
  196608:CIWM3k88YqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOo75i:OM3k88D4F3e+biSDcQwM8uDupi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2