a1ca8fab1a43b44ac4dbf3012fb56cf6665d243c3bcd196b60c527fcad744d94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32da6285a5d78fea4aa28b8de1db00dd.zip
Size

9KB
Sample

240901-em6lga1cpk
MD5

054f658a41d9461692396319188eafa7
SHA1

598e6bef946a40be2a4d16affa274957c0523b08
SHA256

a1ca8fab1a43b44ac4dbf3012fb56cf6665d243c3bcd196b60c527fcad744d94
SHA512

c50ea14d8d3eeb5d8cac60436160e275b15abea5960c15c34a988813fea6ebbbb8b2ba75dc7a007116a47afa67a9958790e00da1274222d965b347cf63312483
SSDEEP

192:pUDFtqDlUZPy2/XdwIW1lVONtFlZVtLM3RgXIAKqWK8qEAx0fATTNYbomnENnFah:8qRyK2/X+1lVON7jPLM3fPqWKxyOmnEu

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4100f0d74bab942a6a3d5347265de7c771a6293d5332113eed6d45298faea3c7
- Size
  
  16KB
- MD5
  
  32da6285a5d78fea4aa28b8de1db00dd
- SHA1
  
  fbc8b7ae519e451c1f5974a5da15200af712d487
- SHA256
  
  4100f0d74bab942a6a3d5347265de7c771a6293d5332113eed6d45298faea3c7
- SHA512
  
  0eac4bd0b7ca4fc3f272491623c67423c6797ba39b4ce44e98a89d31383f86b96673e868234a8cfa6cab1f4095227f47929a27796dd0a65b3d0edfa59af74da4
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY0Fk:hDXWipuE+K3/SSHgxm0C
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2