f1ecd1498e84e52812de654319393312ac5629d57a7e998d036a12a3a46475c1 | Triage

Sharing

General

Target

f1ecd1498e84e52812de654319393312ac5629d57a7e998d036a12a3a46475c1
Size

12.9MB
Sample

240727-2bv2xs1gkp
MD5

68ada1b2ae1c1546ad9db8a5b085c326
SHA1

9f62a7c94ba89a87dad850414c3e9f624cfb425e
SHA256

f1ecd1498e84e52812de654319393312ac5629d57a7e998d036a12a3a46475c1
SHA512

9013392d2141bd0e829da4bbfcd64cbd2456ace5395e30f56c08ca6f1f18178ab097cd847dbc909d95306df21ea54c313b3f5d4ae91d4cf49acd6b3f2d6590d3
SSDEEP

393216:Tb0zsM3W+TQbcVCuTTEVUiWT1u8F7WDoVeSnvR:Tb0zPswIxUziDovvR

Score

7^/10

Malware Config

Targets

- Target
  
  f1ecd1498e84e52812de654319393312ac5629d57a7e998d036a12a3a46475c1
- Size
  
  12.9MB
- MD5
  
  68ada1b2ae1c1546ad9db8a5b085c326
- SHA1
  
  9f62a7c94ba89a87dad850414c3e9f624cfb425e
- SHA256
  
  f1ecd1498e84e52812de654319393312ac5629d57a7e998d036a12a3a46475c1
- SHA512
  
  9013392d2141bd0e829da4bbfcd64cbd2456ace5395e30f56c08ca6f1f18178ab097cd847dbc909d95306df21ea54c313b3f5d4ae91d4cf49acd6b3f2d6590d3
- SSDEEP
  
  393216:Tb0zsM3W+TQbcVCuTTEVUiWT1u8F7WDoVeSnvR:Tb0zPswIxUziDovvR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2