ca106d6ab49767fc9761b2762d9737b73ffbdb15ee36ea231dbb6e8b4515d403 | Triage

Sharing

General

Target

ca106d6ab49767fc9761b2762d9737b73ffbdb15ee36ea231dbb6e8b4515d403
Size

7.6MB
Sample

240903-3ms75s1gnd
MD5

4d771899f7c036011c07e21088b56e00
SHA1

e60ab4b85358968c63923fd30557910c82643a29
SHA256

ca106d6ab49767fc9761b2762d9737b73ffbdb15ee36ea231dbb6e8b4515d403
SHA512

7e79980c0de558369e10227abd60b3d5c7dd53239697d851b1ea29d8e539501b7c54eef0274ce57ca38856b9e3d23a581ddeced18ed6e1c13d3bcea0e995f056
SSDEEP

196608:9oQc+26iZrVG5Jf8KG0C/xwVAKUpPGFW+sZvas:iQc+DEkf8KG95wVkZV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ca106d6ab49767fc9761b2762d9737b73ffbdb15ee36ea231dbb6e8b4515d403
- Size
  
  7.6MB
- MD5
  
  4d771899f7c036011c07e21088b56e00
- SHA1
  
  e60ab4b85358968c63923fd30557910c82643a29
- SHA256
  
  ca106d6ab49767fc9761b2762d9737b73ffbdb15ee36ea231dbb6e8b4515d403
- SHA512
  
  7e79980c0de558369e10227abd60b3d5c7dd53239697d851b1ea29d8e539501b7c54eef0274ce57ca38856b9e3d23a581ddeced18ed6e1c13d3bcea0e995f056
- SSDEEP
  
  196608:9oQc+26iZrVG5Jf8KG0C/xwVAKUpPGFW+sZvas:iQc+DEkf8KG95wVkZV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2