c24e9ac38d21a8cbe06ca9e00f44e14d5ad3febfcc9c161c9be0cfd9d012abab | Triage

Sharing

General

Target

c24e9ac38d21a8cbe06ca9e00f44e14d5ad3febfcc9c161c9be0cfd9d012abab
Size

2.6MB
Sample

240811-chm78azdnk
MD5

d26c56424c414e46e28793f8129741ba
SHA1

73ad5afc3f8b63b5d745175842f5e1c7fb214c33
SHA256

c24e9ac38d21a8cbe06ca9e00f44e14d5ad3febfcc9c161c9be0cfd9d012abab
SHA512

07bb14a84fcbf96b3ce0bcd9aea5659893427d79f586ba3bea832b5cc752ece29eb57cb5502b6740da9b351ccc89649381d0a7788532e5c58167b2279add68f3
SSDEEP

49152:LtckVb9kXDA0vhCcD0Tgy0LXu1qoTzmYvr6/TH:ekVODA0vkcD+v49pN/T

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c24e9ac38d21a8cbe06ca9e00f44e14d5ad3febfcc9c161c9be0cfd9d012abab
- Size
  
  2.6MB
- MD5
  
  d26c56424c414e46e28793f8129741ba
- SHA1
  
  73ad5afc3f8b63b5d745175842f5e1c7fb214c33
- SHA256
  
  c24e9ac38d21a8cbe06ca9e00f44e14d5ad3febfcc9c161c9be0cfd9d012abab
- SHA512
  
  07bb14a84fcbf96b3ce0bcd9aea5659893427d79f586ba3bea832b5cc752ece29eb57cb5502b6740da9b351ccc89649381d0a7788532e5c58167b2279add68f3
- SSDEEP
  
  49152:LtckVb9kXDA0vhCcD0Tgy0LXu1qoTzmYvr6/TH:ekVODA0vkcD+v49pN/T
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2