f85ed05d6e0e32919ced3e6b2b0dd5f39a767a4a5509d2375305bc1f090c38ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f85ed05d6e0e32919ced3e6b2b0dd5f39a767a4a5509d2375305bc1f090c38ee
Size

62KB
Sample

240530-18vxrabe5t
MD5

77350d80731f1e2373a98a2022dbd8b8
SHA1

b0e5946c8548a90dee831316bad4065ad88fd122
SHA256

f85ed05d6e0e32919ced3e6b2b0dd5f39a767a4a5509d2375305bc1f090c38ee
SHA512

14856f668626a99ced875bdfea816ba29e84f853c33aa0fa33341e53192f34b3dfcff32f00a43c3576982717cdb5bdfd5cdd83d2f59544a68926c0ccc693cc95
SSDEEP

768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9K:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWf

Score

7^/10

Malware Config

Targets

- Target
  
  f85ed05d6e0e32919ced3e6b2b0dd5f39a767a4a5509d2375305bc1f090c38ee
- Size
  
  62KB
- MD5
  
  77350d80731f1e2373a98a2022dbd8b8
- SHA1
  
  b0e5946c8548a90dee831316bad4065ad88fd122
- SHA256
  
  f85ed05d6e0e32919ced3e6b2b0dd5f39a767a4a5509d2375305bc1f090c38ee
- SHA512
  
  14856f668626a99ced875bdfea816ba29e84f853c33aa0fa33341e53192f34b3dfcff32f00a43c3576982717cdb5bdfd5cdd83d2f59544a68926c0ccc693cc95
- SSDEEP
  
  768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9K:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2