195a658cde9567f1e8595fe90989e788097c22366d725cc1481aaf825d47bf15 | Triage

Sharing

General

Target

195a658cde9567f1e8595fe90989e788097c22366d725cc1481aaf825d47bf15
Size

232KB
Sample

240704-xyzleawhlb
MD5

5f341cb119671c972be174ffee9136fc
SHA1

1ccf5ea092cf9d291b1e16f938064918d4907717
SHA256

195a658cde9567f1e8595fe90989e788097c22366d725cc1481aaf825d47bf15
SHA512

8de45ea835a84b491994dbd35a2b87d1c0675b3b171e3afd0e7931500bda88e364d4f6757392f4b4208b60eddbf5d4e8de97dacd84383bdc35e12402270fb70a
SSDEEP

3072:GWoKZLeDn4pI+oEhCjG8G3GbGVGBGfGuGxGWYcrf6KadE:GWFZLs4FoEAYcD6Kad

Score

7^/10

Malware Config

Targets

- Target
  
  195a658cde9567f1e8595fe90989e788097c22366d725cc1481aaf825d47bf15
- Size
  
  232KB
- MD5
  
  5f341cb119671c972be174ffee9136fc
- SHA1
  
  1ccf5ea092cf9d291b1e16f938064918d4907717
- SHA256
  
  195a658cde9567f1e8595fe90989e788097c22366d725cc1481aaf825d47bf15
- SHA512
  
  8de45ea835a84b491994dbd35a2b87d1c0675b3b171e3afd0e7931500bda88e364d4f6757392f4b4208b60eddbf5d4e8de97dacd84383bdc35e12402270fb70a
- SSDEEP
  
  3072:GWoKZLeDn4pI+oEhCjG8G3GbGVGBGfGuGxGWYcrf6KadE:GWFZLs4FoEAYcD6Kad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2