40776d235f947719b30e997a13a6fef960699e96b01a417c7b2db5d57f4fceea | Triage

Sharing

General

Target

40776d235f947719b30e997a13a6fef960699e96b01a417c7b2db5d57f4fceea
Size

39KB
Sample

240527-1alanaaf3t
MD5

2488816970f486929443abf6f4a5e548
SHA1

69979fac6556152c1f86a7f34f4c30f0916d9d01
SHA256

40776d235f947719b30e997a13a6fef960699e96b01a417c7b2db5d57f4fceea
SHA512

08e5e0b60d1cae7710b886ec28f32d5f44f63d937a5efd4d62444882f5e1d3799fb7efd19331678ecfd269fc86a0ddfd4b4994743d6bfae9d0d697cb132e1ed9
SSDEEP

768:E8eRH+9lFh0ul16sh7iQroCHaf+RjFBSuB2X8:E9l+Z16sh7iQroC1RB0u5

Score

7^/10

Malware Config

Targets

- Target
  
  40776d235f947719b30e997a13a6fef960699e96b01a417c7b2db5d57f4fceea
- Size
  
  39KB
- MD5
  
  2488816970f486929443abf6f4a5e548
- SHA1
  
  69979fac6556152c1f86a7f34f4c30f0916d9d01
- SHA256
  
  40776d235f947719b30e997a13a6fef960699e96b01a417c7b2db5d57f4fceea
- SHA512
  
  08e5e0b60d1cae7710b886ec28f32d5f44f63d937a5efd4d62444882f5e1d3799fb7efd19331678ecfd269fc86a0ddfd4b4994743d6bfae9d0d697cb132e1ed9
- SSDEEP
  
  768:E8eRH+9lFh0ul16sh7iQroCHaf+RjFBSuB2X8:E9l+Z16sh7iQroC1RB0u5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2