031dcb9e8b59ebcdf335e0f2f9bacdd0eaf376894dbda59913d50b89e49ac379 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

031dcb9e8b59ebcdf335e0f2f9bacdd0eaf376894dbda59913d50b89e49ac379
Size

25KB
Sample

240901-wtppzaydkg
MD5

170fbdfb10b191a448aaeb9decb98e32
SHA1

14e12cbc461c54f230f63ab4c76f5b744a1d1643
SHA256

031dcb9e8b59ebcdf335e0f2f9bacdd0eaf376894dbda59913d50b89e49ac379
SHA512

b319c6e85c587d13ed0b737d43b9542d9913d04f880bdc1eedc5a166737752878856bf01ecf902713fe490d71f923de5375549250802de011691475e8f090101
SSDEEP

768:+GG1xtqzC8JISj3KXW4KdwAx0U2G8DDuwEV:oxtnS1wzDFi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  031dcb9e8b59ebcdf335e0f2f9bacdd0eaf376894dbda59913d50b89e49ac379
- Size
  
  25KB
- MD5
  
  170fbdfb10b191a448aaeb9decb98e32
- SHA1
  
  14e12cbc461c54f230f63ab4c76f5b744a1d1643
- SHA256
  
  031dcb9e8b59ebcdf335e0f2f9bacdd0eaf376894dbda59913d50b89e49ac379
- SHA512
  
  b319c6e85c587d13ed0b737d43b9542d9913d04f880bdc1eedc5a166737752878856bf01ecf902713fe490d71f923de5375549250802de011691475e8f090101
- SSDEEP
  
  768:+GG1xtqzC8JISj3KXW4KdwAx0U2G8DDuwEV:oxtnS1wzDFi
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2