dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb | Triage

Sharing

General

Target

dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
Size

31KB
Sample

240530-emgmcaeg62
MD5

995a7fb88d7f0a08c4038ab4a7803d0b
SHA1

5909705a9a095efda242d068ddfadb9adf9ce6b3
SHA256

dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
SHA512

c86bc3fab5a12948a783ead842754afb66421538ee343e92486f6b98239c77c91dff805917daacaa1cb4c41f4fd72c2e6d6e8db5fd799dcfa4060b7dc9dc994a
SSDEEP

192:KlApk98m4e0/IDJh/5ZQcvoyne4t/PQ3Pw1C0SluWbiWBNEckcVhJriE/mtf:MApc8m4e0GvQak4JI341C0abnk6hJPKf

Score

7^/10

Malware Config

Targets

- Target
  
  dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
- Size
  
  31KB
- MD5
  
  995a7fb88d7f0a08c4038ab4a7803d0b
- SHA1
  
  5909705a9a095efda242d068ddfadb9adf9ce6b3
- SHA256
  
  dfb12509ee2798e392458ca5f1b0e9d50e8f0ce470dfa629bcc9b7748d6435eb
- SHA512
  
  c86bc3fab5a12948a783ead842754afb66421538ee343e92486f6b98239c77c91dff805917daacaa1cb4c41f4fd72c2e6d6e8db5fd799dcfa4060b7dc9dc994a
- SSDEEP
  
  192:KlApk98m4e0/IDJh/5ZQcvoyne4t/PQ3Pw1C0SluWbiWBNEckcVhJriE/mtf:MApc8m4e0GvQak4JI341C0abnk6hJPKf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2