551367e6d282c5428312e380b01ab1eefc8a6cb396141acc306bc6bdda16c255 | Triage

Sharing

General

Target

551367e6d282c5428312e380b01ab1eefc8a6cb396141acc306bc6bdda16c255
Size

32KB
Sample

240807-1tbwbsyble
MD5

b6846dcd96e21c8a9567769ccff75488
SHA1

74b4090684cb6042af541eefdf0e6a3c288b828e
SHA256

551367e6d282c5428312e380b01ab1eefc8a6cb396141acc306bc6bdda16c255
SHA512

9f3dc6de4a4f5fd3039918593b2c567fecdf7af13c7118b3d8855a4b2de921efa2f0cfd5d352afc77dab35da5adb61c3342d632482095979d5bce3cd843e117a
SSDEEP

384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0w9N:cCcvuwU6eHhQDi41U4TGL10w3

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  551367e6d282c5428312e380b01ab1eefc8a6cb396141acc306bc6bdda16c255
- Size
  
  32KB
- MD5
  
  b6846dcd96e21c8a9567769ccff75488
- SHA1
  
  74b4090684cb6042af541eefdf0e6a3c288b828e
- SHA256
  
  551367e6d282c5428312e380b01ab1eefc8a6cb396141acc306bc6bdda16c255
- SHA512
  
  9f3dc6de4a4f5fd3039918593b2c567fecdf7af13c7118b3d8855a4b2de921efa2f0cfd5d352afc77dab35da5adb61c3342d632482095979d5bce3cd843e117a
- SSDEEP
  
  384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0w9N:cCcvuwU6eHhQDi41U4TGL10w3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2