058ec8aea2e44f9e52a83ed41913748d6522de9e7dab4236e1e39573dcd44dec | Triage

Sharing

General

Target

3ffc0df03cdbe03ffd76745e948d8a30N.exe
Size

57KB
Sample

240902-gra2gavcnb
MD5

3ffc0df03cdbe03ffd76745e948d8a30
SHA1

06cadb12de125da8e863ccc096d23d998bef4ef9
SHA256

058ec8aea2e44f9e52a83ed41913748d6522de9e7dab4236e1e39573dcd44dec
SHA512

beaaf27874b9f5d9788d4b00f1acd348e90e61983bfc716deef70b1a3b7841689c89fc5bb0b7a5af0acec9e57e5ed97d5905eba89b51b01f434b1b6ded1a9600
SSDEEP

384:asjPGY2HXgrkEYYhQ98E8I1XAV/QcaYpATUgch1A9NB/erxlFIbFB:aePG5H8XhKD8ISZQjkgs1lxlFkr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3ffc0df03cdbe03ffd76745e948d8a30N.exe
- Size
  
  57KB
- MD5
  
  3ffc0df03cdbe03ffd76745e948d8a30
- SHA1
  
  06cadb12de125da8e863ccc096d23d998bef4ef9
- SHA256
  
  058ec8aea2e44f9e52a83ed41913748d6522de9e7dab4236e1e39573dcd44dec
- SHA512
  
  beaaf27874b9f5d9788d4b00f1acd348e90e61983bfc716deef70b1a3b7841689c89fc5bb0b7a5af0acec9e57e5ed97d5905eba89b51b01f434b1b6ded1a9600
- SSDEEP
  
  384:asjPGY2HXgrkEYYhQ98E8I1XAV/QcaYpATUgch1A9NB/erxlFIbFB:aePG5H8XhKD8ISZQjkgs1lxlFkr
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2