6c00e72c33fdfd49b0c9fd782c531d788c9c715db46d4a36f08ee2b945e956cf | Triage

Sharing

General

Target

6c00e72c33fdfd49b0c9fd782c531d788c9c715db46d4a36f08ee2b945e956cf
Size

1.1MB
Sample

240829-k3xamatbqg
MD5

f4371638a7cf3c2734b432b7499634e1
SHA1

1aeac1a8fe3b7f1ac229c10902277c4887c8a6b9
SHA256

6c00e72c33fdfd49b0c9fd782c531d788c9c715db46d4a36f08ee2b945e956cf
SHA512

5c977c901528021d6279aade4c9820c91c3ba51ad025cafb50b1e19e542fadd199176a48e641e5d34c80bd276883537c0ccd42804dd004629eb758228b9f7b17
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Qn:CcaClSFlG4ZM7QzMQ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6c00e72c33fdfd49b0c9fd782c531d788c9c715db46d4a36f08ee2b945e956cf
- Size
  
  1.1MB
- MD5
  
  f4371638a7cf3c2734b432b7499634e1
- SHA1
  
  1aeac1a8fe3b7f1ac229c10902277c4887c8a6b9
- SHA256
  
  6c00e72c33fdfd49b0c9fd782c531d788c9c715db46d4a36f08ee2b945e956cf
- SHA512
  
  5c977c901528021d6279aade4c9820c91c3ba51ad025cafb50b1e19e542fadd199176a48e641e5d34c80bd276883537c0ccd42804dd004629eb758228b9f7b17
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5Qn:CcaClSFlG4ZM7QzMQ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2