931ddd4bf627689b897cc26f21462c817c4603898dc5ce75c1c2b90fc47fc95b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

931ddd4bf627689b897cc26f21462c817c4603898dc5ce75c1c2b90fc47fc95b
Size

18KB
Sample

240807-azqcsswajm
MD5

80f72b08060f089118691ec2d02ccffb
SHA1

7a759a0f1696c9a4d3840986370a4266e82cc6cd
SHA256

931ddd4bf627689b897cc26f21462c817c4603898dc5ce75c1c2b90fc47fc95b
SHA512

1744429378bd33f0dde433137ac1d5cd4ae91045c7b54df37e9e93ea3bc00799119a885177ee4c1fa249e34d1046cf2c449678a018ed9854a258deab2837ff58
SSDEEP

384:xiOQWRIga02iBunne0vq0/Cz9W5q5gdug:xVhRm0z+rC8Rp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  931ddd4bf627689b897cc26f21462c817c4603898dc5ce75c1c2b90fc47fc95b
- Size
  
  18KB
- MD5
  
  80f72b08060f089118691ec2d02ccffb
- SHA1
  
  7a759a0f1696c9a4d3840986370a4266e82cc6cd
- SHA256
  
  931ddd4bf627689b897cc26f21462c817c4603898dc5ce75c1c2b90fc47fc95b
- SHA512
  
  1744429378bd33f0dde433137ac1d5cd4ae91045c7b54df37e9e93ea3bc00799119a885177ee4c1fa249e34d1046cf2c449678a018ed9854a258deab2837ff58
- SSDEEP
  
  384:xiOQWRIga02iBunne0vq0/Cz9W5q5gdug:xVhRm0z+rC8Rp
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2