c15b8a5d5bf4eb3b8042ae6be5d4e0f8a1b4d66b93a6fd694f7a3393cf03688c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c15b8a5d5bf4eb3b8042ae6be5d4e0f8a1b4d66b93a6fd694f7a3393cf03688c
Size

1.1MB
Sample

240811-zyz82syaql
MD5

4619807a62424dc8081dfcb4b7582b0c
SHA1

b151273f012ecdd5b08c686c80766a90e0eac052
SHA256

c15b8a5d5bf4eb3b8042ae6be5d4e0f8a1b4d66b93a6fd694f7a3393cf03688c
SHA512

396fbdebaf4743432d1d36b7312f071d1f6a24c195c83e0254e4b98ffb1f2e92431deb4ef2623d2083c4d496b2adf1c06f52eee2ed8e6c16b2651f5b3f8f677a
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QU:CcaClSFlG4ZM7QzMT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c15b8a5d5bf4eb3b8042ae6be5d4e0f8a1b4d66b93a6fd694f7a3393cf03688c
- Size
  
  1.1MB
- MD5
  
  4619807a62424dc8081dfcb4b7582b0c
- SHA1
  
  b151273f012ecdd5b08c686c80766a90e0eac052
- SHA256
  
  c15b8a5d5bf4eb3b8042ae6be5d4e0f8a1b4d66b93a6fd694f7a3393cf03688c
- SHA512
  
  396fbdebaf4743432d1d36b7312f071d1f6a24c195c83e0254e4b98ffb1f2e92431deb4ef2623d2083c4d496b2adf1c06f52eee2ed8e6c16b2651f5b3f8f677a
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QU:CcaClSFlG4ZM7QzMT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2