9f5d0398d222cf5768e2ab3a81e7d6e15993750fd766009af26b5b799e345a9d | Triage

Sharing

General

Target

9f5d0398d222cf5768e2ab3a81e7d6e15993750fd766009af26b5b799e345a9d
Size

60KB
Sample

240727-bwvnsa1dmc
MD5

21595dab7b5a59c5261963cb3db25623
SHA1

254ab2696f4e9ab660b85e2f3736f3a6fffbec57
SHA256

9f5d0398d222cf5768e2ab3a81e7d6e15993750fd766009af26b5b799e345a9d
SHA512

6be8708d61865ab89445e5a469d33750eb95a2a77e9b96022adcfa8a0db0d451487364d4d8cc7f2df979871137bfe933562ce2ee6bae767f9c0f83a898851286
SSDEEP

768:K9X2bnEpieDA62eIHwhzMnUJ30XbLt3EDEAndeVFipE0FCgKqk3F:IXaEoMA62ZYYUN0rxKOFuE0FCjqkV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9f5d0398d222cf5768e2ab3a81e7d6e15993750fd766009af26b5b799e345a9d
- Size
  
  60KB
- MD5
  
  21595dab7b5a59c5261963cb3db25623
- SHA1
  
  254ab2696f4e9ab660b85e2f3736f3a6fffbec57
- SHA256
  
  9f5d0398d222cf5768e2ab3a81e7d6e15993750fd766009af26b5b799e345a9d
- SHA512
  
  6be8708d61865ab89445e5a469d33750eb95a2a77e9b96022adcfa8a0db0d451487364d4d8cc7f2df979871137bfe933562ce2ee6bae767f9c0f83a898851286
- SSDEEP
  
  768:K9X2bnEpieDA62eIHwhzMnUJ30XbLt3EDEAndeVFipE0FCgKqk3F:IXaEoMA62ZYYUN0rxKOFuE0FCjqkV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2