b98075db570fc987b7482d44376513b152526ee0840bfea366383e1fc09688d7 | Triage

Sharing

General

Target

b98075db570fc987b7482d44376513b152526ee0840bfea366383e1fc09688d7
Size

1.1MB
Sample

240704-ws9nratfqd
MD5

7e94a02caa3a4b4d4a6854d4b0552463
SHA1

fe143bdd71151d91eb03aed5b3f7929e3e7563cd
SHA256

b98075db570fc987b7482d44376513b152526ee0840bfea366383e1fc09688d7
SHA512

8d1863febf4b0a76d229a523d3447667559b65bea5164a0b2d6e6c3294d150d0e2bdddcd3242a4ed9c38044a890c2806604f5f4ce2ab760a6a37ac16b781e834
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Qv:CcaClSFlG4ZM7QzMY

Score

7^/10

Malware Config

Targets

- Target
  
  b98075db570fc987b7482d44376513b152526ee0840bfea366383e1fc09688d7
- Size
  
  1.1MB
- MD5
  
  7e94a02caa3a4b4d4a6854d4b0552463
- SHA1
  
  fe143bdd71151d91eb03aed5b3f7929e3e7563cd
- SHA256
  
  b98075db570fc987b7482d44376513b152526ee0840bfea366383e1fc09688d7
- SHA512
  
  8d1863febf4b0a76d229a523d3447667559b65bea5164a0b2d6e6c3294d150d0e2bdddcd3242a4ed9c38044a890c2806604f5f4ce2ab760a6a37ac16b781e834
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Qv:CcaClSFlG4ZM7QzMY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2