0c66634f46b969d85a5f9ebf9dd0375997973a9f1690b3c0a7180226cd7c9437 | Triage

Sharing

General

Target

0c66634f46b969d85a5f9ebf9dd0375997973a9f1690b3c0a7180226cd7c9437
Size

1.8MB
Sample

240625-nwkj2axfka
MD5

0d6b47f72d35f79b7ea7babfe5c8d6ff
SHA1

2a0d10dfff080567da31f2c07636bf9297388df2
SHA256

0c66634f46b969d85a5f9ebf9dd0375997973a9f1690b3c0a7180226cd7c9437
SHA512

aef45537c4eb9bfca309aefff66ec745e0802a830c06275d099ebbcff874589e87653871b11d8c63cfde286e66d9cbcceec0c2d4eef5ed2e1297479e5d91055e
SSDEEP

24576:Lnnnq333xHHHJz6jfV1gNU6qjCfOC7k6Tdp8PfwOZLAq:2z6jfVjd+OCI6b8f

Score

7^/10

Malware Config

Targets

- Target
  
  0c66634f46b969d85a5f9ebf9dd0375997973a9f1690b3c0a7180226cd7c9437
- Size
  
  1.8MB
- MD5
  
  0d6b47f72d35f79b7ea7babfe5c8d6ff
- SHA1
  
  2a0d10dfff080567da31f2c07636bf9297388df2
- SHA256
  
  0c66634f46b969d85a5f9ebf9dd0375997973a9f1690b3c0a7180226cd7c9437
- SHA512
  
  aef45537c4eb9bfca309aefff66ec745e0802a830c06275d099ebbcff874589e87653871b11d8c63cfde286e66d9cbcceec0c2d4eef5ed2e1297479e5d91055e
- SSDEEP
  
  24576:Lnnnq333xHHHJz6jfV1gNU6qjCfOC7k6Tdp8PfwOZLAq:2z6jfVjd+OCI6b8f
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2