dbb2379595f0e6c4586bb6e30fbda936378854814b253f71a3aa0c941a2f9bf9 | Triage

Sharing

General

Target

dbb2379595f0e6c4586bb6e30fbda936378854814b253f71a3aa0c941a2f9bf9
Size

1.1MB
Sample

240710-zxdnnazdrj
MD5

1887c162bc09af430797085df1c78f41
SHA1

76870ae475504b53e6bc01cfc7c9328abb1c11e5
SHA256

dbb2379595f0e6c4586bb6e30fbda936378854814b253f71a3aa0c941a2f9bf9
SHA512

1612c92cde0a51a0c0c33e8b07d0539eca0a8e78618de5297c1aae9275aa74ce9961ea028f66dd51699030b891dd669739ab94bb43096a3c2d1867bf289a3336
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QP:CcaClSFlG4ZM7QzM4

Score

7^/10

Malware Config

Targets

- Target
  
  dbb2379595f0e6c4586bb6e30fbda936378854814b253f71a3aa0c941a2f9bf9
- Size
  
  1.1MB
- MD5
  
  1887c162bc09af430797085df1c78f41
- SHA1
  
  76870ae475504b53e6bc01cfc7c9328abb1c11e5
- SHA256
  
  dbb2379595f0e6c4586bb6e30fbda936378854814b253f71a3aa0c941a2f9bf9
- SHA512
  
  1612c92cde0a51a0c0c33e8b07d0539eca0a8e78618de5297c1aae9275aa74ce9961ea028f66dd51699030b891dd669739ab94bb43096a3c2d1867bf289a3336
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QP:CcaClSFlG4ZM7QzM4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2