3b5ea1f03dc60bb18098d95311e5fe2b1b943971307b1fed9bac71285f49ce5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5ea1f03dc60bb18098d95311e5fe2b1b943971307b1fed9bac71285f49ce5e
Size

737KB
Sample

240608-1khbragg4v
MD5

3066a14c8c8950122c342d81328ff3db
SHA1

09343587d9b55103dc9d5960a594804c4d4c4df0
SHA256

3b5ea1f03dc60bb18098d95311e5fe2b1b943971307b1fed9bac71285f49ce5e
SHA512

08be2dad7a14bf126a3a88a67d9145533592dd33e5c64fbabe8a889c33c3a066f09be739ab5c60870fcc34c0c89993457b6660e2681a847a9e40709a4c3088f5
SSDEEP

6144:pqDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jk2jcbaqE7Al8jk2j0:p+67XR9JSSxvYGdodH/1CVc1CV0

Score

7^/10

Malware Config

Targets

- Target
  
  3b5ea1f03dc60bb18098d95311e5fe2b1b943971307b1fed9bac71285f49ce5e
- Size
  
  737KB
- MD5
  
  3066a14c8c8950122c342d81328ff3db
- SHA1
  
  09343587d9b55103dc9d5960a594804c4d4c4df0
- SHA256
  
  3b5ea1f03dc60bb18098d95311e5fe2b1b943971307b1fed9bac71285f49ce5e
- SHA512
  
  08be2dad7a14bf126a3a88a67d9145533592dd33e5c64fbabe8a889c33c3a066f09be739ab5c60870fcc34c0c89993457b6660e2681a847a9e40709a4c3088f5
- SSDEEP
  
  6144:pqDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jk2jcbaqE7Al8jk2j0:p+67XR9JSSxvYGdodH/1CVc1CV0
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2