f38dfbe31ae4e92a5004b79559385e11e4b9a8276bd08e314de901d7ab138e8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f38dfbe31ae4e92a5004b79559385e11e4b9a8276bd08e314de901d7ab138e8f
Size

3.5MB
Sample

240525-v8svhace99
MD5

82d7a8e1c7ccc06bc9b9f02aadab7e46
SHA1

90381e6567736e6f6924ca3b49c4cffce5dd22dd
SHA256

f38dfbe31ae4e92a5004b79559385e11e4b9a8276bd08e314de901d7ab138e8f
SHA512

4f3b5d515aab69919eb38c7e6f0adf7d04e9074a839db2dbcb089fe9608a0e89893891abd5acdf6a37aeb36068518d94d1b4606322157b143d426a5fa84a7c94
SSDEEP

49152:4iCrJIy7Nd4x6aeJ3UKGuaimbQGB937qyNFIlJmXywwb3MLFLKT8cgxPdkxj2DYw:4iTy7N+RemZixI932yH3QbgxWMYAZh

Score

7^/10

Malware Config

Targets

- Target
  
  f38dfbe31ae4e92a5004b79559385e11e4b9a8276bd08e314de901d7ab138e8f
- Size
  
  3.5MB
- MD5
  
  82d7a8e1c7ccc06bc9b9f02aadab7e46
- SHA1
  
  90381e6567736e6f6924ca3b49c4cffce5dd22dd
- SHA256
  
  f38dfbe31ae4e92a5004b79559385e11e4b9a8276bd08e314de901d7ab138e8f
- SHA512
  
  4f3b5d515aab69919eb38c7e6f0adf7d04e9074a839db2dbcb089fe9608a0e89893891abd5acdf6a37aeb36068518d94d1b4606322157b143d426a5fa84a7c94
- SSDEEP
  
  49152:4iCrJIy7Nd4x6aeJ3UKGuaimbQGB937qyNFIlJmXywwb3MLFLKT8cgxPdkxj2DYw:4iTy7N+RemZixI932yH3QbgxWMYAZh
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2