0f6cb594f743900c9b61abdf16a7e9a77d93792742231eb84bdc7cdaa5afde90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f6cb594f743900c9b61abdf16a7e9a77d93792742231eb84bdc7cdaa5afde90
Size

42KB
Sample

240705-xhbjmstalj
MD5

604f27b8b4ebe29101902e15a53cc918
SHA1

1c6697bf9fd9c2e4276301c68a0f6bfafe6fb051
SHA256

0f6cb594f743900c9b61abdf16a7e9a77d93792742231eb84bdc7cdaa5afde90
SHA512

6af3c71dcd42ab3ebeee11927c28e97bf9f4bab7807335ea5853d70d0a552d04b865d005718b5471e335e583d33100d9ecc6ff80074ecc886eef8283a34e6072
SSDEEP

768:m8eRH+9lFh0ul16sh7iQroCHXf+RjFBSuB2XdT1Bz:m9l+Z16sh7iQroCWRB0uaTv

Score

7^/10

Malware Config

Targets

- Target
  
  0f6cb594f743900c9b61abdf16a7e9a77d93792742231eb84bdc7cdaa5afde90
- Size
  
  42KB
- MD5
  
  604f27b8b4ebe29101902e15a53cc918
- SHA1
  
  1c6697bf9fd9c2e4276301c68a0f6bfafe6fb051
- SHA256
  
  0f6cb594f743900c9b61abdf16a7e9a77d93792742231eb84bdc7cdaa5afde90
- SHA512
  
  6af3c71dcd42ab3ebeee11927c28e97bf9f4bab7807335ea5853d70d0a552d04b865d005718b5471e335e583d33100d9ecc6ff80074ecc886eef8283a34e6072
- SSDEEP
  
  768:m8eRH+9lFh0ul16sh7iQroCHXf+RjFBSuB2XdT1Bz:m9l+Z16sh7iQroCWRB0uaTv
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2