a1ff018ae5d8043a43c6323154e89fcbe1d725c87ba1f3e3cb393047e6b4ab38 | Triage

Sharing

General

Target

0af9996389089ed5a37dffb20115d660N
Size

2.0MB
Sample

240907-vks6cswgpf
MD5

0af9996389089ed5a37dffb20115d660
SHA1

923d23a18eb0f494afff8f42025ef62c01d8e16c
SHA256

a1ff018ae5d8043a43c6323154e89fcbe1d725c87ba1f3e3cb393047e6b4ab38
SHA512

d9a1a8df24ff3c246a7f20d37ec131692ad6a0acee01d056547e98188dd0c50b4f3eabc94fcc010ae2887daf641b179b36289cd3ee6633078abbad3d39de2159
SSDEEP

49152:fxTeZUleSs7Z/n6a96iOtgdtvQuIDZOK7c7GY0wWqDqT9K:JleSsRn6c6PU5QuIDc7PrWqDqT9K

Score

7^/10

Malware Config

Targets

- Target
  
  0af9996389089ed5a37dffb20115d660N
- Size
  
  2.0MB
- MD5
  
  0af9996389089ed5a37dffb20115d660
- SHA1
  
  923d23a18eb0f494afff8f42025ef62c01d8e16c
- SHA256
  
  a1ff018ae5d8043a43c6323154e89fcbe1d725c87ba1f3e3cb393047e6b4ab38
- SHA512
  
  d9a1a8df24ff3c246a7f20d37ec131692ad6a0acee01d056547e98188dd0c50b4f3eabc94fcc010ae2887daf641b179b36289cd3ee6633078abbad3d39de2159
- SSDEEP
  
  49152:fxTeZUleSs7Z/n6a96iOtgdtvQuIDZOK7c7GY0wWqDqT9K:JleSsRn6c6PU5QuIDc7PrWqDqT9K
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2