b8a535c89149e8c8d8de6a246b4d849ce0b9148e119e72e7ebb9df432468f3c4 | Triage

Sharing

General

Target

2c7432d3739a0980a3b2e409561ae51a.zip
Size

10KB
Sample

240901-q7kqaasgqe
MD5

95865fdca53139be64c4a24baaf7c184
SHA1

0cf8b95b77f583c06ca18c37f319d1f5b1c32ecb
SHA256

b8a535c89149e8c8d8de6a246b4d849ce0b9148e119e72e7ebb9df432468f3c4
SHA512

2dea9c2c95e4436bf300b8442a141ccb44e9a95977a621c947d89985b009a1f91aaa96599136c590e2d3be30eed6655adf2960725bbb24c2bf54b5880ab848a0
SSDEEP

192:I9uUYR/dhdI2Nkupja0r7/5ityQU1om2pdUY9eXQkXPb6MAdvbwo1BAKR:I9yR1hmCfjaUj5vz1d2p+YSQk/2MAdTt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7a136886a9389f2e077e67f6860d77084ba06826f1ae04772be420fabb3603ed
- Size
  
  15KB
- MD5
  
  2c7432d3739a0980a3b2e409561ae51a
- SHA1
  
  e0fdec47b1931d0f415900137898b10dad0806e4
- SHA256
  
  7a136886a9389f2e077e67f6860d77084ba06826f1ae04772be420fabb3603ed
- SHA512
  
  734ab3c64bd23824ef35b4458d77dfa23691f836aa506ed5198dd89f831c977b0c51cc1fc034ab2828b661968045f3310aa7082a4ccd4c5481fcb96f037e0f66
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYLNo:hDXWipuE+K3/SSHgxmL2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2