afbdf5d26b4490f4f8ead070053f398fe3a983321a13a81244525218579bcfc2 | Triage

Sharing

General

Target

afbdf5d26b4490f4f8ead070053f398fe3a983321a13a81244525218579bcfc2
Size

1.1MB
Sample

240829-tz6vbs1bmb
MD5

ccb23030db18760db3e3fa8039073973
SHA1

01c14d39d547807e63a4f4018f39bc6fcce85814
SHA256

afbdf5d26b4490f4f8ead070053f398fe3a983321a13a81244525218579bcfc2
SHA512

6b2932796baa5c20eb408ea06304fd93c37d56392aaa73fecc034f4d803ee10ac6cf7d446d39c87beaa6455e94bfae6049ce0fdc3d387007e60b761047b88305
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q3:acallSllG4ZM7QzMg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  afbdf5d26b4490f4f8ead070053f398fe3a983321a13a81244525218579bcfc2
- Size
  
  1.1MB
- MD5
  
  ccb23030db18760db3e3fa8039073973
- SHA1
  
  01c14d39d547807e63a4f4018f39bc6fcce85814
- SHA256
  
  afbdf5d26b4490f4f8ead070053f398fe3a983321a13a81244525218579bcfc2
- SHA512
  
  6b2932796baa5c20eb408ea06304fd93c37d56392aaa73fecc034f4d803ee10ac6cf7d446d39c87beaa6455e94bfae6049ce0fdc3d387007e60b761047b88305
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q3:acallSllG4ZM7QzMg
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2