e96b3dccf53d45f2a14805591b6a7ae9c0bdc5757c7b46330a80bcf16e89a972 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de22659d9bdb954044b9b53d3254a3d9.zip
Size

10KB
Sample

240901-rlneqashmj
MD5

3002264f66734877a60bcb4724d3abb6
SHA1

57c6bfa51522cef842161772bd65a2ca931eb40d
SHA256

e96b3dccf53d45f2a14805591b6a7ae9c0bdc5757c7b46330a80bcf16e89a972
SHA512

d83571b33ca99fd6edb3cbac9b2fb8250150377cc3ff1223bfd2dec89ef34c39bfe6434409112e25b5054cf33b3e159520dc390da64c2e6ea238617dd3dc21be
SSDEEP

192:QuPp3NeUWNPEDVoloIJNUCLUpJmOxsTiKcOTGWh+n1T72OS21i0makEHo7sgbGEt:QuhHMZlFNMvsxtTtMB72/P0m94WPbGi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  81e71b29a40dad46372d670263254a18afc1d61deb133f842ffac90a91deaf3a
- Size
  
  16KB
- MD5
  
  de22659d9bdb954044b9b53d3254a3d9
- SHA1
  
  aa0844065b3c3938baec89a07a1e5db178687cc7
- SHA256
  
  81e71b29a40dad46372d670263254a18afc1d61deb133f842ffac90a91deaf3a
- SHA512
  
  fb3159dc8dc9521ecb1dc3c0fed4c20ad2de2aea23bb1f058bc6a14f8b9fc31576630aee329960b21070727581d779536d515f80ce33adf547f1451538bb0b1e
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhRzA:hDXWipuE+K3/SSHgx3A
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2