af226616ff0103d8ad65f857ba21e0c4c2eb3ec45fba475564998fda75c2723c | Triage

Sharing

General

Target

af226616ff0103d8ad65f857ba21e0c4c2eb3ec45fba475564998fda75c2723c
Size

1.1MB
Sample

240530-x7gf7ahh78
MD5

cdef04efc558ad2f334bd8fd887f9e02
SHA1

dc7b978828a8cb9c37bc16ec1dca2f461ab23ad8
SHA256

af226616ff0103d8ad65f857ba21e0c4c2eb3ec45fba475564998fda75c2723c
SHA512

8eccee22a34b50d28db3c2b6da20d5cb3043a172a4ba104d72911a9ebfb4007005506452b1b1eb9c5cfa5ad64bfc45498c67d1c4320e7903dc3dd87028abb108
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QP:CcaClSFlG4ZM7QzMo

Score

7^/10

Malware Config

Targets

- Target
  
  af226616ff0103d8ad65f857ba21e0c4c2eb3ec45fba475564998fda75c2723c
- Size
  
  1.1MB
- MD5
  
  cdef04efc558ad2f334bd8fd887f9e02
- SHA1
  
  dc7b978828a8cb9c37bc16ec1dca2f461ab23ad8
- SHA256
  
  af226616ff0103d8ad65f857ba21e0c4c2eb3ec45fba475564998fda75c2723c
- SHA512
  
  8eccee22a34b50d28db3c2b6da20d5cb3043a172a4ba104d72911a9ebfb4007005506452b1b1eb9c5cfa5ad64bfc45498c67d1c4320e7903dc3dd87028abb108
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QP:CcaClSFlG4ZM7QzMo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2