9210492a3ff10cc65460c76b08b5145486174a1847a43319756bf16c6cd59ada | Triage

Sharing

General

Target

cceff670837e81ab694b337321fdfaa0.zip
Size

9KB
Sample

240903-v21a1ataqa
MD5

9700ecc738a7ad1e35879406500cda6b
SHA1

1e561f118ed3130ff2d1075554abf66dd0e83c6d
SHA256

9210492a3ff10cc65460c76b08b5145486174a1847a43319756bf16c6cd59ada
SHA512

2a3768f886185c595747c31e63b19943ee5dcc0397f64ff3229c1b365f601a2648114486011d66563ce9a1ec54dc3562f9f3fc620c76f7e94d555690cd3e2047
SSDEEP

192:Zb7eCw+qEBDkfd9Hj/l5st0f03RSG9wW3aUwQ4xkD7n:ZCEKjHj/l5c0f033y3o7n

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4e05fe0587c5286ac4d7a7cb35e32332afa25391e168b74e976af8a7d21d07e
- Size
  
  16KB
- MD5
  
  cceff670837e81ab694b337321fdfaa0
- SHA1
  
  388e21e0b8cf4e3db3e1075052184ff2e86bf1ea
- SHA256
  
  b4e05fe0587c5286ac4d7a7cb35e32332afa25391e168b74e976af8a7d21d07e
- SHA512
  
  7a14c1b58e0551d50445d2c23f9eda33cc180a7d56df99d331f1e04e99f6a045ce4e6c3bdd6d751db9e82467f40789e7f21ceecb5b5f390d3c76f0fb2793e2c5
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY0F2:hDXWipuE+K3/SSHgxm0A
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2