3943e1c9fa88a32b1d589cf75dee13bd70029e8365a64b471e39e3c57849f459 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3943e1c9fa88a32b1d589cf75dee13bd70029e8365a64b471e39e3c57849f459
Size

1.1MB
Sample

240828-zh861sxark
MD5

36247942fc9f074517b59111709f0c02
SHA1

a79b9872bcf2e1eab71beaadc74499961d106ffc
SHA256

3943e1c9fa88a32b1d589cf75dee13bd70029e8365a64b471e39e3c57849f459
SHA512

248187aefa7bc157cae58fba1d864775b6fdb8a98ebf50b2880a3426031a3c702bdc9df1c9b47a4d7de0afb2ffa508481ea0b53b715cd1bbb4fb48322da550a5
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QY:acallSllG4ZM7QzMP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3943e1c9fa88a32b1d589cf75dee13bd70029e8365a64b471e39e3c57849f459
- Size
  
  1.1MB
- MD5
  
  36247942fc9f074517b59111709f0c02
- SHA1
  
  a79b9872bcf2e1eab71beaadc74499961d106ffc
- SHA256
  
  3943e1c9fa88a32b1d589cf75dee13bd70029e8365a64b471e39e3c57849f459
- SHA512
  
  248187aefa7bc157cae58fba1d864775b6fdb8a98ebf50b2880a3426031a3c702bdc9df1c9b47a4d7de0afb2ffa508481ea0b53b715cd1bbb4fb48322da550a5
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QY:acallSllG4ZM7QzMP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2