db1e3b9f03008745a59ff36d6da30bcc5dc496aed12b65909632d142c4357359 | Triage

Sharing

General

Target

3b440b25022aa6cf85f5503c230c0099.bin
Size

128.5MB
Sample

240630-b8spysvhmm
MD5

3b440b25022aa6cf85f5503c230c0099
SHA1

6783368217b6b56941b80085047ded5fb06177af
SHA256

db1e3b9f03008745a59ff36d6da30bcc5dc496aed12b65909632d142c4357359
SHA512

a37b27ecd8a555e5673dd3b012a5b260253b40c0e90d4cbe88d138e8c59e7d6f23b8e336b4442f7b8b57ab9a69e61cde5dea531b64eac525e31d124f269ec352
SSDEEP

3145728:a5+ShtbCnbLEN4Mfvl6qJ1WE7oswHiEzCsLRURS:aVp6qJUliEzhLRUQ

Score

7^/10

Malware Config

Targets

- Target
  
  3b440b25022aa6cf85f5503c230c0099.bin
- Size
  
  128.5MB
- MD5
  
  3b440b25022aa6cf85f5503c230c0099
- SHA1
  
  6783368217b6b56941b80085047ded5fb06177af
- SHA256
  
  db1e3b9f03008745a59ff36d6da30bcc5dc496aed12b65909632d142c4357359
- SHA512
  
  a37b27ecd8a555e5673dd3b012a5b260253b40c0e90d4cbe88d138e8c59e7d6f23b8e336b4442f7b8b57ab9a69e61cde5dea531b64eac525e31d124f269ec352
- SSDEEP
  
  3145728:a5+ShtbCnbLEN4Mfvl6qJ1WE7oswHiEzCsLRURS:aVp6qJUliEzhLRUQ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2