f6d46a99b34de23d3d1a7f150a5482154cbd0207284504d603ec29eff2161ec1 | Triage

Sharing

General

Target

de096a0b4d1e4ec6e1264561db544138.zip
Size

10KB
Sample

240903-yqglasvhnn
MD5

7e91299ba8dc5de4eb6a16d55e692c6d
SHA1

67673aa30202fed35ceefbc38dd8de35220e4e69
SHA256

f6d46a99b34de23d3d1a7f150a5482154cbd0207284504d603ec29eff2161ec1
SHA512

48b826c5e0a777f9b98a4fa7ca87be7a7f630b3a65d042d1abf04f52fa9f137f92aba5ba46a937c960b991ba5f9634066bc393edc68a30f430abeb56c2bf00e6
SSDEEP

192:fjwYwHfqjKUcs8j5a31E7hOEZGPMBcWLHzCKFZQsTqp4FBbu//0MB3nm:7aoWj502dOEZGE++H3ZQs9FBbs0am

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  731ec5dda7fcfc5bda31e8609ec286049d26fa12cf7707d50197a468590c2ee2
- Size
  
  16KB
- MD5
  
  de096a0b4d1e4ec6e1264561db544138
- SHA1
  
  bcad7bb9591ce4a46cb89b97038754774a84b04a
- SHA256
  
  731ec5dda7fcfc5bda31e8609ec286049d26fa12cf7707d50197a468590c2ee2
- SHA512
  
  7d480a44b36a5a43fc22022205ac936216b6423e7d2fe4b224461fe544c53f55b2a6ced5746809b66672c8cf1a9ba2a57e679742db838b67137492d15ee1ffd6
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY44EA1H:hDXWipuE+K3/SSHgxm5Z1H
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2