478c48b85a426caceb2d6bb8e44f1a7e017538a7723df251dd44db004ed35c83 | Triage

Sharing

General

Target

a7f4356eb4557683dca62decb16523b0N
Size

33KB
Sample

240826-egrv5avell
MD5

a7f4356eb4557683dca62decb16523b0
SHA1

e65e8b9181290af0be783f06e88bca49d693e81f
SHA256

478c48b85a426caceb2d6bb8e44f1a7e017538a7723df251dd44db004ed35c83
SHA512

15cf1e82b82c7dce9a7c16620cc307a0a676ea6fb9647fcc89ca74c3fbba107d43a2005f2ab45d33b86b040196171f0d0c072205b769bf1ac4bd431e255429c0
SSDEEP

768:G26uYzQhmWSm8/mjHgH9OAwj5FeHtpx/EzdP:GVrsmDveLgdOA05FmDpEzdP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a7f4356eb4557683dca62decb16523b0N
- Size
  
  33KB
- MD5
  
  a7f4356eb4557683dca62decb16523b0
- SHA1
  
  e65e8b9181290af0be783f06e88bca49d693e81f
- SHA256
  
  478c48b85a426caceb2d6bb8e44f1a7e017538a7723df251dd44db004ed35c83
- SHA512
  
  15cf1e82b82c7dce9a7c16620cc307a0a676ea6fb9647fcc89ca74c3fbba107d43a2005f2ab45d33b86b040196171f0d0c072205b769bf1ac4bd431e255429c0
- SSDEEP
  
  768:G26uYzQhmWSm8/mjHgH9OAwj5FeHtpx/EzdP:GVrsmDveLgdOA05FmDpEzdP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2