c8e81b11c928d45eee32588d87956f0fab633a88c39c8efdb3a451b6e4351697 | Triage

Sharing

General

Target

c8e81b11c928d45eee32588d87956f0fab633a88c39c8efdb3a451b6e4351697
Size

1.1MB
Sample

240710-zxdzessdlg
MD5

75cbf00b7c64a2a8240828c6696728dd
SHA1

88f1a5977e42da9824cc944b93b61a1b848932e0
SHA256

c8e81b11c928d45eee32588d87956f0fab633a88c39c8efdb3a451b6e4351697
SHA512

f8e7d835c7ba430578f6483f1638fc5c049c014e5fed2e39170ff2735c9e9eff6c165f4378b11127f03099e29728fa7e04645d4366695a416613ca294c2b499f
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Q/:CcaClSFlG4ZM7QzMo

Score

7^/10

Malware Config

Targets

- Target
  
  c8e81b11c928d45eee32588d87956f0fab633a88c39c8efdb3a451b6e4351697
- Size
  
  1.1MB
- MD5
  
  75cbf00b7c64a2a8240828c6696728dd
- SHA1
  
  88f1a5977e42da9824cc944b93b61a1b848932e0
- SHA256
  
  c8e81b11c928d45eee32588d87956f0fab633a88c39c8efdb3a451b6e4351697
- SHA512
  
  f8e7d835c7ba430578f6483f1638fc5c049c014e5fed2e39170ff2735c9e9eff6c165f4378b11127f03099e29728fa7e04645d4366695a416613ca294c2b499f
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Q/:CcaClSFlG4ZM7QzMo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2