639ad23dc2e7a82d7143a66c5eb6ec57af3ffde48d78fcaffcb671f78810614b | Triage

Sharing

General

Target

639ad23dc2e7a82d7143a66c5eb6ec57af3ffde48d78fcaffcb671f78810614b
Size

32KB
Sample

240614-1192psxgpg
MD5

aeb114686c56428cc39af0ac2ff163b6
SHA1

fb543255148d86e4c1e295254d92cd7ca4f3b9c1
SHA256

639ad23dc2e7a82d7143a66c5eb6ec57af3ffde48d78fcaffcb671f78810614b
SHA512

32e8ea133069ac66ca457e2af36745ff28613a87f1e968cbdbf8873c0ad29191f6abcdd96f47629a99c28001b4a74527442aff24483e729d79a60db040a7d8af
SSDEEP

384:MApc8m4e0GvQak4JI341C0abnk6hJPEom:MApQr0GvdFJI34qTk6hJP6

Score

7^/10

Malware Config

Targets

- Target
  
  639ad23dc2e7a82d7143a66c5eb6ec57af3ffde48d78fcaffcb671f78810614b
- Size
  
  32KB
- MD5
  
  aeb114686c56428cc39af0ac2ff163b6
- SHA1
  
  fb543255148d86e4c1e295254d92cd7ca4f3b9c1
- SHA256
  
  639ad23dc2e7a82d7143a66c5eb6ec57af3ffde48d78fcaffcb671f78810614b
- SHA512
  
  32e8ea133069ac66ca457e2af36745ff28613a87f1e968cbdbf8873c0ad29191f6abcdd96f47629a99c28001b4a74527442aff24483e729d79a60db040a7d8af
- SSDEEP
  
  384:MApc8m4e0GvQak4JI341C0abnk6hJPEom:MApQr0GvdFJI34qTk6hJP6
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2