15c12a73644c3df077aa2e7c33206e79dde84144e81823e816efb7cd1f5ff312 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15c12a73644c3df077aa2e7c33206e79dde84144e81823e816efb7cd1f5ff312
Size

538KB
Sample

240907-xracyazbkr
MD5

ba75e9b9f92c15d3ebc6752658abb4a2
SHA1

cd44103f37d562363b530a69979428d5e0fec02c
SHA256

15c12a73644c3df077aa2e7c33206e79dde84144e81823e816efb7cd1f5ff312
SHA512

a66c1c1ee5c3e48fb1ee00abea7d4c9b72ffe1f3164b4d1f14b7fe28061b7bb75fde725d1d7d6af43d6b825152274f2c22c0f2253645733445e222816fbac400
SSDEEP

3072:tCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxY:tqDAwl0xPTMiR9JSSxPUKYGdodHd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  15c12a73644c3df077aa2e7c33206e79dde84144e81823e816efb7cd1f5ff312
- Size
  
  538KB
- MD5
  
  ba75e9b9f92c15d3ebc6752658abb4a2
- SHA1
  
  cd44103f37d562363b530a69979428d5e0fec02c
- SHA256
  
  15c12a73644c3df077aa2e7c33206e79dde84144e81823e816efb7cd1f5ff312
- SHA512
  
  a66c1c1ee5c3e48fb1ee00abea7d4c9b72ffe1f3164b4d1f14b7fe28061b7bb75fde725d1d7d6af43d6b825152274f2c22c0f2253645733445e222816fbac400
- SSDEEP
  
  3072:tCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxY:tqDAwl0xPTMiR9JSSxPUKYGdodHd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2