56e9d329d9269f34ce7ef17ffffdd33033965ebf4d3ea14f1e2c97fbe92d908b | Triage

Sharing

General

Target

56e9d329d9269f34ce7ef17ffffdd33033965ebf4d3ea14f1e2c97fbe92d908b
Size

44KB
Sample

240726-1xdt4a1apa
MD5

f4901c9bfccaba213ad6a205718c0e72
SHA1

c5b8c7667ff4be67884723e62360407ad7a51916
SHA256

56e9d329d9269f34ce7ef17ffffdd33033965ebf4d3ea14f1e2c97fbe92d908b
SHA512

c4dbbc3a5200177111d1a8a188ce29bef741bb9131d032d4742748000850ccd2112511ab3db9c0ca1f4b34619c33e8b91881fe6c87d5b6aabfe0c2c33272e148
SSDEEP

768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1aCp:MAaDJlMsh7pWezW

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  56e9d329d9269f34ce7ef17ffffdd33033965ebf4d3ea14f1e2c97fbe92d908b
- Size
  
  44KB
- MD5
  
  f4901c9bfccaba213ad6a205718c0e72
- SHA1
  
  c5b8c7667ff4be67884723e62360407ad7a51916
- SHA256
  
  56e9d329d9269f34ce7ef17ffffdd33033965ebf4d3ea14f1e2c97fbe92d908b
- SHA512
  
  c4dbbc3a5200177111d1a8a188ce29bef741bb9131d032d4742748000850ccd2112511ab3db9c0ca1f4b34619c33e8b91881fe6c87d5b6aabfe0c2c33272e148
- SSDEEP
  
  768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1aCp:MAaDJlMsh7pWezW
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2