d7b8e749ef05fb799a81b40c6f142a09067f68e48f4bf270a5871d4673885d88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7b8e749ef05fb799a81b40c6f142a09067f68e48f4bf270a5871d4673885d88
Size

207KB
Sample

240811-df4ymawcne
MD5

935a3de46e2be9bfe42a527d8197e856
SHA1

e0562412ff1fd7468c6c711febbecb00afd31e60
SHA256

d7b8e749ef05fb799a81b40c6f142a09067f68e48f4bf270a5871d4673885d88
SHA512

9b7a95efabdb69b68f075c83e1fd97efff2e42c179c237e6745919aa65ce2c3cfc116bc5b230948a4c03576a819b0911028b00de052cc556dd5e243b0b1ee145
SSDEEP

1536:lHtNFk+5wIaVanPSE8GHo7P1A4xVz28nTtonfZIqijuJ:ldk+xagnPm/P1A4xVzVonfFJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d7b8e749ef05fb799a81b40c6f142a09067f68e48f4bf270a5871d4673885d88
- Size
  
  207KB
- MD5
  
  935a3de46e2be9bfe42a527d8197e856
- SHA1
  
  e0562412ff1fd7468c6c711febbecb00afd31e60
- SHA256
  
  d7b8e749ef05fb799a81b40c6f142a09067f68e48f4bf270a5871d4673885d88
- SHA512
  
  9b7a95efabdb69b68f075c83e1fd97efff2e42c179c237e6745919aa65ce2c3cfc116bc5b230948a4c03576a819b0911028b00de052cc556dd5e243b0b1ee145
- SSDEEP
  
  1536:lHtNFk+5wIaVanPSE8GHo7P1A4xVz28nTtonfZIqijuJ:ldk+xagnPm/P1A4xVzVonfFJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2