182b76ddd18c00cb3ab5a0d7432fba31712eecb2a89279bce38114bdb7a48b1c | Triage

Sharing

General

Target

182b76ddd18c00cb3ab5a0d7432fba31712eecb2a89279bce38114bdb7a48b1c
Size

1.1MB
Sample

240808-2yfwhssakk
MD5

bddedb07f37c6c5c91af3fd90ec033eb
SHA1

0c9da9da680ecc74d0641b1993850d254394b040
SHA256

182b76ddd18c00cb3ab5a0d7432fba31712eecb2a89279bce38114bdb7a48b1c
SHA512

815a22c97f3d1425207da54ec837fa7b8f61d9aa1e4eae571309bf0d2fa6b8e529f1cb38e4913247a2ed82ec860d65c38658b206bf235e842f701ae04d523eb3
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q8:acallSllG4ZM7QzMr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  182b76ddd18c00cb3ab5a0d7432fba31712eecb2a89279bce38114bdb7a48b1c
- Size
  
  1.1MB
- MD5
  
  bddedb07f37c6c5c91af3fd90ec033eb
- SHA1
  
  0c9da9da680ecc74d0641b1993850d254394b040
- SHA256
  
  182b76ddd18c00cb3ab5a0d7432fba31712eecb2a89279bce38114bdb7a48b1c
- SHA512
  
  815a22c97f3d1425207da54ec837fa7b8f61d9aa1e4eae571309bf0d2fa6b8e529f1cb38e4913247a2ed82ec860d65c38658b206bf235e842f701ae04d523eb3
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q8:acallSllG4ZM7QzMr
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2