9ef5794554654358d03a31e211e7b11975f0aa572547fc93cafaf6d9812d9a7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ef5794554654358d03a31e211e7b11975f0aa572547fc93cafaf6d9812d9a7d
Size

7.2MB
Sample

240528-yq8d1sbc42
MD5

142f3d981570edbfe186969c5b921b07
SHA1

1f4877445911cc49d3d65fcf56d38a4cf3ae8a74
SHA256

9ef5794554654358d03a31e211e7b11975f0aa572547fc93cafaf6d9812d9a7d
SHA512

f0ea472d4dc4bf6ef4b8b16ce851c17140bee07458f3e65f99e6f3594e8e1bde017832c2244e7da4e89dc73e48ff1fed0c777f7d5d6cdf71c875462717c38058
SSDEEP

98304:oUMhnJ/R36/bkydLgV1y2LQAxHbG6cjw+DMjcwr63ejZPjI4HvGdGL7CM+1btX5G:NSH36Iydc1IAxHbG6rjYOGkqt0KJ2

Score

7^/10

Malware Config

Targets

- Target
  
  9ef5794554654358d03a31e211e7b11975f0aa572547fc93cafaf6d9812d9a7d
- Size
  
  7.2MB
- MD5
  
  142f3d981570edbfe186969c5b921b07
- SHA1
  
  1f4877445911cc49d3d65fcf56d38a4cf3ae8a74
- SHA256
  
  9ef5794554654358d03a31e211e7b11975f0aa572547fc93cafaf6d9812d9a7d
- SHA512
  
  f0ea472d4dc4bf6ef4b8b16ce851c17140bee07458f3e65f99e6f3594e8e1bde017832c2244e7da4e89dc73e48ff1fed0c777f7d5d6cdf71c875462717c38058
- SSDEEP
  
  98304:oUMhnJ/R36/bkydLgV1y2LQAxHbG6cjw+DMjcwr63ejZPjI4HvGdGL7CM+1btX5G:NSH36Iydc1IAxHbG6rjYOGkqt0KJ2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2