193f5d859c69b65babbf2b4e38b078632c38943aa64c5ce9b8e25bdb1b8742e4 | Triage

Sharing

General

Target

baf0690f5e83cdda90259d99be123ec4.zip
Size

8KB
Sample

240903-mcmdvavfnh
MD5

150b3d04a72717414a8be22849acd654
SHA1

4d9cbd4e72bbcbedf092523cf36f4183ab38e12d
SHA256

193f5d859c69b65babbf2b4e38b078632c38943aa64c5ce9b8e25bdb1b8742e4
SHA512

f82ba870f4ed07cec979ff0d5fbb403dd911637ec72965de719ff68f0a571b24e6b589ea8c6fa83ad205c05eaf320e68c970f33a2f8bfd730966ed4078418ebc
SSDEEP

192:RZJqXQ+/HAIeDB3mCCbY37XVVizcnPnmIVUd8pfdXRH+g/bnUT1O7FCP:VqXZcYKDjnPmIBtR//bUT45k

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1c2cc13b41bc986a24633037748c3359371b620e9e65f0f9d5911c60f1fe5590
- Size
  
  13KB
- MD5
  
  baf0690f5e83cdda90259d99be123ec4
- SHA1
  
  87ac210437e66262017586df412a5c523107a4d8
- SHA256
  
  1c2cc13b41bc986a24633037748c3359371b620e9e65f0f9d5911c60f1fe5590
- SHA512
  
  6b753f7cba1dae7a0ef4f6f1781cdbe7250e29466333d5b509eef16d46c05851d8aa6c608e25dbe9b2c681bdd233d0682fdc3fabd8a94221ac37174c557c737b
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhLZ:hDXWipuE+K3/SSHgxD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2