99616dcdcf563ce02702b8769b7f157994c26091b5c76a0a51979714ccd2918d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99616dcdcf563ce02702b8769b7f157994c26091b5c76a0a51979714ccd2918d
Size

46KB
Sample

240620-a8t3catgql
MD5

a5ff47d60b48cbed5ee5992f6dddfc2a
SHA1

e033aa9162f6ada415291ae2bf3a6e05eae16909
SHA256

99616dcdcf563ce02702b8769b7f157994c26091b5c76a0a51979714ccd2918d
SHA512

295e71659a64bc99d198283dce46f4b8b3775aadb6de96aeb0b6b9b234217a889e65345e3599aabdef9dff533d2981d4adc5dcbe3f4a6b3a13eb7b9c674ee600
SSDEEP

768:uIuGUiEAJHr9OpZWtdEI2MyzNORQtOflIwoHNM2XBFV7WB7lx7+sBmWL0A9D5YAR:YGUiEAJeZWtdEI2MyzNORQtOflIwoHNi

Score

7^/10

Malware Config

Targets

- Target
  
  99616dcdcf563ce02702b8769b7f157994c26091b5c76a0a51979714ccd2918d
- Size
  
  46KB
- MD5
  
  a5ff47d60b48cbed5ee5992f6dddfc2a
- SHA1
  
  e033aa9162f6ada415291ae2bf3a6e05eae16909
- SHA256
  
  99616dcdcf563ce02702b8769b7f157994c26091b5c76a0a51979714ccd2918d
- SHA512
  
  295e71659a64bc99d198283dce46f4b8b3775aadb6de96aeb0b6b9b234217a889e65345e3599aabdef9dff533d2981d4adc5dcbe3f4a6b3a13eb7b9c674ee600
- SSDEEP
  
  768:uIuGUiEAJHr9OpZWtdEI2MyzNORQtOflIwoHNM2XBFV7WB7lx7+sBmWL0A9D5YAR:YGUiEAJeZWtdEI2MyzNORQtOflIwoHNi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2