2896d3820bdba7e16391472b0ba4e6859d00617c7ea0942bb09aa9e3bb5e9aff | Triage

Sharing

General

Target

1a66883e197b07a279cc71e3aa581702.zip
Size

10KB
Sample

240903-ptvsnawhkm
MD5

2472a41e842ee89d37fed2069ea9d3e9
SHA1

1487ebe18801fb8d36c6a8206daf0c472a7b61ff
SHA256

2896d3820bdba7e16391472b0ba4e6859d00617c7ea0942bb09aa9e3bb5e9aff
SHA512

da11af7f5ef7b207d57b893740375061e8bb912c36c9ee6f37e16ebe197adc48d6d46b5d530a4445a5f6b18c0882c7e619dcd5695f5f6e8b4e63b0379bd2dd7e
SSDEEP

192:MT9hJFbtpDPG1hE2ZUn1Fuf109L/A4fwCCFGI4QdTn6OgoBjgbDuz:MT9x7DPGz5WZNYbv4Yn68BADuz

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4e4010c3961d59d5236bd596364f21f54b7a0ee84959abd847a219be3f0771f6
- Size
  
  15KB
- MD5
  
  1a66883e197b07a279cc71e3aa581702
- SHA1
  
  c0ff3eb7efc04e621749223909ca31663604adb7
- SHA256
  
  4e4010c3961d59d5236bd596364f21f54b7a0ee84959abd847a219be3f0771f6
- SHA512
  
  e55e9a3248207f3f8bcdaabc48d57023c963883beea5354dba6a8bf718812c614871b12f6f0ab3c1aacc89f84fa7205da7ded0ecd278dfe3b7e7941834fa3809
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY5X/EmW:hDXWipuE+K3/SSHgxm5sX
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2