46f976a9587222506de3b88881ae582e12313ac965f6c07617f16021cce4bdf1 | Triage

Sharing

General

Target

46f976a9587222506de3b88881ae582e12313ac965f6c07617f16021cce4bdf1
Size

9KB
Sample

240725-zv5pcsvblm
MD5

eb74a16e1ad912343958959813ecf442
SHA1

b6f80ed332ea4c44dfcc9ad0191f37818d3eca04
SHA256

46f976a9587222506de3b88881ae582e12313ac965f6c07617f16021cce4bdf1
SHA512

97f42afea86d7571f1f7763035a48fbe824d9bec52e7cb7ce3bf157bb7c465711b6784d41c48412d2266626c0b5c95637c881b0b6701716ab5dae64278a0dd61
SSDEEP

96:zb+u4l46fPl6C8w/Z3cy4cfnp35veaiUgCsGZkM6m2As1c4SYgXuN4yYjB:WHO6V6CXZSYp0aiZCpc1ZSYgXu2fjB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  46f976a9587222506de3b88881ae582e12313ac965f6c07617f16021cce4bdf1
- Size
  
  9KB
- MD5
  
  eb74a16e1ad912343958959813ecf442
- SHA1
  
  b6f80ed332ea4c44dfcc9ad0191f37818d3eca04
- SHA256
  
  46f976a9587222506de3b88881ae582e12313ac965f6c07617f16021cce4bdf1
- SHA512
  
  97f42afea86d7571f1f7763035a48fbe824d9bec52e7cb7ce3bf157bb7c465711b6784d41c48412d2266626c0b5c95637c881b0b6701716ab5dae64278a0dd61
- SSDEEP
  
  96:zb+u4l46fPl6C8w/Z3cy4cfnp35veaiUgCsGZkM6m2As1c4SYgXuN4yYjB:WHO6V6CXZSYp0aiZCpc1ZSYgXu2fjB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2