7957c6fc3da11ef3f2dc26fb5ff9078877cc286c926ba9bf86a5ee4c608c95d6 | Triage

Sharing

General

Target

7957c6fc3da11ef3f2dc26fb5ff9078877cc286c926ba9bf86a5ee4c608c95d6
Size

1.1MB
Sample

240829-nqm3zayhng
MD5

b57e14c0dece1ea1fe57058a5fe41423
SHA1

e1204611d6f51332324630bd438bba94846cbf7a
SHA256

7957c6fc3da11ef3f2dc26fb5ff9078877cc286c926ba9bf86a5ee4c608c95d6
SHA512

97cd27c6985e404ccf5fc7051ddbb3d0dd3c7318b1e59322675105bb0a008b0befd4463a67c2c3b992175aa49589d21f6105d4fe6fef4c19a28562a02794dc19
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QD:CcaClSFlG4ZM7QzMU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7957c6fc3da11ef3f2dc26fb5ff9078877cc286c926ba9bf86a5ee4c608c95d6
- Size
  
  1.1MB
- MD5
  
  b57e14c0dece1ea1fe57058a5fe41423
- SHA1
  
  e1204611d6f51332324630bd438bba94846cbf7a
- SHA256
  
  7957c6fc3da11ef3f2dc26fb5ff9078877cc286c926ba9bf86a5ee4c608c95d6
- SHA512
  
  97cd27c6985e404ccf5fc7051ddbb3d0dd3c7318b1e59322675105bb0a008b0befd4463a67c2c3b992175aa49589d21f6105d4fe6fef4c19a28562a02794dc19
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QD:CcaClSFlG4ZM7QzMU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2