b1a142d7b164528eedaf21ce7a867b713b72c2ed6c2147bbbe37bbe209ec2fcd | Triage

Sharing

General

Target

a32f79193610e3b9d191a3b777e67354.zip
Size

10KB
Sample

240903-f47qjazbjg
MD5

b891d5f6f1f4c78a64fefd50c567b5d0
SHA1

98f2c75d0be4fdbd6e2718eadfbf23ace3d450b5
SHA256

b1a142d7b164528eedaf21ce7a867b713b72c2ed6c2147bbbe37bbe209ec2fcd
SHA512

4fa254879bf94f1c887269558842c05e2e1aa4e9b849306e2dcf24533dc43b1bf5f103b5344dce571dd9a97253dd66b4f5346cd3ab12992e99a37c7ad2825d49
SSDEEP

192:X/hjXXDy90nAK9/g8fhMmp6EHPXPXIvWndQxx8ZklcP5MP6s3RXy7RHsoh/nbz3p:xTc87MmpfgIixx8WcRaStH1Vbj93

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a15c38d693e263955237ce5e678b121be0d700f5c292e0dfd4afd5fa7877c17d
- Size
  
  15KB
- MD5
  
  a32f79193610e3b9d191a3b777e67354
- SHA1
  
  e28835a34ece1c61628561057e02de1905ef011c
- SHA256
  
  a15c38d693e263955237ce5e678b121be0d700f5c292e0dfd4afd5fa7877c17d
- SHA512
  
  31dc2494ce5127674f7e8ad475e021eaf388565da116f3b4834807592fc59c386daa821bb091bcf40b5596a06a2876a4c0632980a1a940480eac25d33f80df19
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4Yh4cn/vP:hDXWipuE+K3/SSHgx//vP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2