8a72c93ddd72c8a591680e6f68136ef895637ec00a9454d0d9817cfd9955bc85 | Triage

Sharing

General

Target

8a72c93ddd72c8a591680e6f68136ef895637ec00a9454d0d9817cfd9955bc85
Size

1.1MB
Sample

240809-bb35esxdmg
MD5

29f0e9e74f43e87260872ebb2ec4bb3d
SHA1

2702f1af53e31e08ea24f0a7329b135aef809922
SHA256

8a72c93ddd72c8a591680e6f68136ef895637ec00a9454d0d9817cfd9955bc85
SHA512

b453e8bcf31131d6345e18c361e928cc0d067124f52d1d101a3e84f43e41599afa009cf93866747bc7c1a8721805c85f7875964156316293e434c91d3ea44204
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Q0:CcaClSFlG4ZM7QzMT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8a72c93ddd72c8a591680e6f68136ef895637ec00a9454d0d9817cfd9955bc85
- Size
  
  1.1MB
- MD5
  
  29f0e9e74f43e87260872ebb2ec4bb3d
- SHA1
  
  2702f1af53e31e08ea24f0a7329b135aef809922
- SHA256
  
  8a72c93ddd72c8a591680e6f68136ef895637ec00a9454d0d9817cfd9955bc85
- SHA512
  
  b453e8bcf31131d6345e18c361e928cc0d067124f52d1d101a3e84f43e41599afa009cf93866747bc7c1a8721805c85f7875964156316293e434c91d3ea44204
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Q0:CcaClSFlG4ZM7QzMT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2