58c3cf89f91a4eb69b861b5db317830e15f640e9b3d7eadfb12fd3c48a901820 | Triage

Sharing

General

Target

5423cc2f70cf3c502c9387442c6c5768.zip
Size

9KB
Sample

240901-cmwedsydql
MD5

cfa8b786f52e438a834675d9572bd9fe
SHA1

60a690e7a501fd145735c295ad435adb5067c651
SHA256

58c3cf89f91a4eb69b861b5db317830e15f640e9b3d7eadfb12fd3c48a901820
SHA512

17cd480cc929aab7621622e1e38b125e955bc7f9e403c22d51ffd7baa71bdb6c276feb0678ee413f191cec38e6220bf3e7eeb1ce3103c66b5eb37b5d35569c18
SSDEEP

192:tXklRk6RwRFbMe1BtEYECNshVtq1duO1UUf7g5AWzS0CVlF:gRk6RAFbMe1TEImqR15+AW+0glF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b7169a795e600f323e165407b0724290ed46cf86190c5f78a733d294a59edcea
- Size
  
  14KB
- MD5
  
  5423cc2f70cf3c502c9387442c6c5768
- SHA1
  
  7a73f73b178127dcdea2b377e927bb5bd8287cd2
- SHA256
  
  b7169a795e600f323e165407b0724290ed46cf86190c5f78a733d294a59edcea
- SHA512
  
  8b427757a9d205f77f1f27f9b07e3de5d5651bab57275ac2ab44e8a3c56a61465a7da66dc0a38e73d7c2899c3e2536ed0bcd5b37ddf06dea94e992733b1decd2
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYt:hDXWipuE+K3/SSHgxmt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2