d13fd23e58228672bf18b9f3bdc21bbf5c3e5181b266bc65fffaf9392234dc68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d13fd23e58228672bf18b9f3bdc21bbf5c3e5181b266bc65fffaf9392234dc68
Size

1.1MB
Sample

240823-cz1jwatbmn
MD5

58326a16196d58e64ca62c8a58789c8c
SHA1

7c2e04d6459f182db9028ced71c3005c7e7e2bb1
SHA256

d13fd23e58228672bf18b9f3bdc21bbf5c3e5181b266bc65fffaf9392234dc68
SHA512

f8b5d8b9c6cb38230193cccef82e762f66754903406431358b466a3050a3d79bdf1768d3051f458b69981715417a0d1821308fb2571628b6559c03c153f75780
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q8:acallSllG4ZM7QzML

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d13fd23e58228672bf18b9f3bdc21bbf5c3e5181b266bc65fffaf9392234dc68
- Size
  
  1.1MB
- MD5
  
  58326a16196d58e64ca62c8a58789c8c
- SHA1
  
  7c2e04d6459f182db9028ced71c3005c7e7e2bb1
- SHA256
  
  d13fd23e58228672bf18b9f3bdc21bbf5c3e5181b266bc65fffaf9392234dc68
- SHA512
  
  f8b5d8b9c6cb38230193cccef82e762f66754903406431358b466a3050a3d79bdf1768d3051f458b69981715417a0d1821308fb2571628b6559c03c153f75780
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q8:acallSllG4ZM7QzML
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2