f3f2bf280118b51394bac97e52e499289020c0848c371c3c9a99bd465871f0d5 | Triage

Sharing

General

Target

26758226b02b56428050b0913a798ba4.zip
Size

10KB
Sample

240903-q1dndsyaql
MD5

00219aa765d53cdfca371745b0747cfa
SHA1

aac161b68fe288f007e13377b0335d4c518a0fc2
SHA256

f3f2bf280118b51394bac97e52e499289020c0848c371c3c9a99bd465871f0d5
SHA512

8cc4e96da4aa960abd3aeed5daa9a1d82d4d2970775392816065525cc45aa831565b7884006eb154c7f032fa81197fed6f3ed80175839319a663219a25c6e56e
SSDEEP

192:A6fTH6ba8XVQROK/yWYnEvMkOzst93Ai/wnQjdNcdkmmtYMhU:A6fT0nXVORLfkkOzs33P/wnWJBGMS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  84558690339b20106c00579b28c8779ceb8bf31de983accbaf4466b551906a56
- Size
  
  14KB
- MD5
  
  26758226b02b56428050b0913a798ba4
- SHA1
  
  97a5f45a20dfd52878fd76326d35ecf5334e36c2
- SHA256
  
  84558690339b20106c00579b28c8779ceb8bf31de983accbaf4466b551906a56
- SHA512
  
  c1837ea8cb4341868e7a061193993fce2fee6097816b4bdf64b3183d8d76eb5856860555f3eae68cacaace72f1a421e02f1cb8d3005c055eb056787f40719489
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYfso+:hDXWipuE+K3/SSHgxmft+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2