3f0763f3304cd6dd175893a2146e78e3d224b29c627d2a476a044f715d2a84fa | Triage

Sharing

General

Target

6e1d294a95c002ff59d6f2af282f108c.zip
Size

9KB
Sample

240901-d62k7azhrl
MD5

50d361e9f304fcba118392aaaefd304d
SHA1

511ce67e7114d139341740272c2f2d4dfcbd79be
SHA256

3f0763f3304cd6dd175893a2146e78e3d224b29c627d2a476a044f715d2a84fa
SHA512

390c3877b4aea2e327d1875feb9b96d6cdd802acef6b431fb010947f334a5fbe832dc2fb9f5f49cea28ce942445853240e9f73e7d579bee433799b4c97f6a734
SSDEEP

192:hcqd3J3/FCEdeTyId6hndkI99j9ssjehyVvBmKS2E4VO2PTN7Sms:NJYdTyZh2I39ssjehyVvvSSv0ms

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0af19b9afdd5648503cf87dc6ab82e04763ce79ec81e3199dd63165c6094d3cf
- Size
  
  16KB
- MD5
  
  6e1d294a95c002ff59d6f2af282f108c
- SHA1
  
  7f5ac39b0b6f6ef1689e20940c94a3e33a39e8df
- SHA256
  
  0af19b9afdd5648503cf87dc6ab82e04763ce79ec81e3199dd63165c6094d3cf
- SHA512
  
  091b2dc8c1f7412420423b54010b92ba3af8c10050c7fda351f3c1499703739b4a676f3ce71e9868d648a7556753933dd502a02acb1fcfbe47e991323918e335
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yhn:hDXWipuE+K3/SSHgxl
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2