c548fce4988535a63951bbb50b32ec4ed43ce6b148b281711b30172455f22ee3 | Triage

Sharing

General

Target

ec1f2785283bff449a44f590c6086ac4.zip
Size

9KB
Sample

240901-r26w1atcnl
MD5

a741644c02e13458d55ce45288ba1155
SHA1

1e9827d8cad9ad0da54959f30cbe09b9c1c73531
SHA256

c548fce4988535a63951bbb50b32ec4ed43ce6b148b281711b30172455f22ee3
SHA512

6209b941d77014142053194dae124bc4d544dfbe99a61f39e45467cd97a3902a574f238faaad2ec945f0c883a49f1a61d8aa455daf9bf7dbc04f8a3de75d6a6f
SSDEEP

192:rf+KrqLXchpjHp7JMMAR2Zwlb12tL0hheoL0v/G92M9ghIAMWB9iq/4HMD37mf8G:rf5rqLMhpjJDAMZwlb4LGRQHlcgiAMgO

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9f30cd4d40e15496b6c3c8640e54d66607f233bb7f8ea42c014e25659ce31193
- Size
  
  14KB
- MD5
  
  ec1f2785283bff449a44f590c6086ac4
- SHA1
  
  2d8724f981e87eea644b3e9199dd5a55f43ee35f
- SHA256
  
  9f30cd4d40e15496b6c3c8640e54d66607f233bb7f8ea42c014e25659ce31193
- SHA512
  
  dee709041c9c19b791d0fcfa56dbddd6e311979f8c54a060985d528dfa5dc2661a45e445e8f529fb21f054766f2a661d1e49877c12434fe1acd17a964eca451b
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYfQw:hDXWipuE+K3/SSHgxmf7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2