422963d4d341eab1542c58c7708a436e0d453df38d543128a1ed740ff71bcb2e | Triage

Sharing

General

Target

5c118ac87060f6f205cc4793b8a9500b.zip
Size

9KB
Sample

240901-g554rsthqc
MD5

f870b5b1db9c4f7a7aa73b0d17e5dae0
SHA1

6c972f91e31097849fe4d2a835f5e6413cf27bc6
SHA256

422963d4d341eab1542c58c7708a436e0d453df38d543128a1ed740ff71bcb2e
SHA512

04a58de5e528e8331cef35785a4d3ff3009ce186d1acc6600ccf6434b9203af63f679f553924d561c81bf7ed19fa2a1dfe842aecd7eb373bb23d3aecab0e09df
SSDEEP

192:kLIzD33PUXFuus4HxuxNBEtbQ1mNPOkRUiEucTKNZMVmLPyiCM7OL:kLIzDvUV5k5E5Q1n6HMEcm7X7OL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8048c9a02745ad0e16347e5edf90f30abd3f8285b66e8cd9ecfdaf81c68f2a5d
- Size
  
  14KB
- MD5
  
  5c118ac87060f6f205cc4793b8a9500b
- SHA1
  
  f50ed9d66033353357224576efcb2666ba9b9821
- SHA256
  
  8048c9a02745ad0e16347e5edf90f30abd3f8285b66e8cd9ecfdaf81c68f2a5d
- SHA512
  
  e51e224e68ad37d25358d07dd2bd7fa021531130e6f3d1562a14119a6013538e444a1818969ea788c3df9e475c31b310d91a156a18b1d4c8796cadc1a3c2b2e6
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhRlGV:hDXWipuE+K3/SSHgxoV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2