003291b532c939c57beb986b7c9eb8dad307832000680ac66136c2c88015e3e2 | Triage

Sharing

General

Target

cc469f137221fe0f88526c416d767d46.zip
Size

10KB
Sample

240903-r41srs1cng
MD5

9185aa5eef0d2433ab441039adc4b955
SHA1

9ca46560ef79a886c5d19abdfad93d3703d519df
SHA256

003291b532c939c57beb986b7c9eb8dad307832000680ac66136c2c88015e3e2
SHA512

e1b942150efca37a680d5daa03b8ae509b959e10b20519cb269a911def0ccec076dd95ed2f05baec18920a779e9bf809a3b522a47d62d10791b558a3b755f4dd
SSDEEP

192:I1OV0rFmvy0BxWY2B1bWz7VeCo4pa2bLOZmh/yYwgezPye396k:UOV0rFSy0rRUWz7cbWa2n3hqLgezPys

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1c3406506c4cb8b2538e6044f7ec849f0ae13dc088f25b68ca307fa9c26460d6
- Size
  
  16KB
- MD5
  
  cc469f137221fe0f88526c416d767d46
- SHA1
  
  adaf54c0a7d8eec727b7668d01089ff87c9cb744
- SHA256
  
  1c3406506c4cb8b2538e6044f7ec849f0ae13dc088f25b68ca307fa9c26460d6
- SHA512
  
  40d355a5e683fb0f534259dcc6e8f8016594aba6b03ff6b29ce75cb8ad5b9a93330637c345e01f821e5336c0e9978d553eb2a87d9fabd787443a5928735aa1f6
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYlF:hDXWipuE+K3/SSHgxmlF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2