84ddaa0591adf4afe5eebdb3a9dd22a50f46a200829afdb49875de9fd4f0bfcb | Triage

Sharing

General

Target

b88828bb90c23342fca74b2e0f7a8491.zip
Size

9KB
Sample

240901-r26w1atcnm
MD5

616fc4c8975627f273b11f4faf974e66
SHA1

1c6e29a5ebc79e0f848ef8de7c27716563e46f2a
SHA256

84ddaa0591adf4afe5eebdb3a9dd22a50f46a200829afdb49875de9fd4f0bfcb
SHA512

2173e9426216950ded21cd4eca77b5cc589790b8f9d521fe0c922b11dc3683e65a29e5dc91de4a3ba6d6a7c2c0606fbea1c3ae6fb12fa04a815673a70f96cd23
SSDEEP

192:UutU8T5E56W5OVQ3dChzSEHmEA3rTDD6IrEQ6gsCj0lLNYg/:e8o6t8ChmgA3rTPNrEQ63lLb/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1d5a70e1e61c880a33f5277c019d28f1a91534894f6c60d59069f500ea3276ed
- Size
  
  14KB
- MD5
  
  b88828bb90c23342fca74b2e0f7a8491
- SHA1
  
  12dee435022fa6e516eeb5281e47cd362844dbe9
- SHA256
  
  1d5a70e1e61c880a33f5277c019d28f1a91534894f6c60d59069f500ea3276ed
- SHA512
  
  16a39b324fc33a0b62603be60470bf75c9cb7fbde4ecd4ba2e717069a7f91423367c7370a6485828f0b1fdd1f52b2b8015a01de9a65e0810dbcf3274730eb1b7
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYJBX:hDXWipuE+K3/SSHgxmbX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2