af43f41b601c6f278b66515ae2b60c761a10bca231ea7372c77be72f4a90edf8 | Triage

Sharing

General

Target

81e80a483584cb9c82e050bacb63175b.zip
Size

10KB
Sample

240831-3tmc6ssfld
MD5

b8d81a71a74fa5f8bd2bc3ddd2f83364
SHA1

7a860de6954f6e19b0aa1653a16183fd651e2ed0
SHA256

af43f41b601c6f278b66515ae2b60c761a10bca231ea7372c77be72f4a90edf8
SHA512

a8890220b287de388cea12bef106626c508eca34157f425f430370122d92539b5dfd358d2f86eb1edfe0f0e7095f395c17df4a4465f42e11129ee49598ed55ae
SSDEEP

192:ji+xmvPblr/bVO6UkasPh8DJidUWSCEt/0jkODANEYZg9UXGdNeK:2+xmXtbIDyh6XCE5POku9U2dMK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1dc2b153ca88508fb2fa2c2899ea12e8e1c7d4f0f825b75d6128b45742bd41cf
- Size
  
  15KB
- MD5
  
  81e80a483584cb9c82e050bacb63175b
- SHA1
  
  51566d797ca743d5f778fcd4a4db0508a0612cee
- SHA256
  
  1dc2b153ca88508fb2fa2c2899ea12e8e1c7d4f0f825b75d6128b45742bd41cf
- SHA512
  
  94fa15748244203a6ab92240ca45e4368e1b92e7b04ae01f3163f873fbe534420481f245e471a7674676139d3a5a7be0d96d3fdacd961d9b8b725a8609eb1436
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYyh6QK:hDXWipuE+K3/SSHgxmyh6QK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2