5b02654f2f4d42076312e8f6d5303ff5be3f4de6d95f53ce8c5e007773c5819f | Triage

Sharing

General

Target

a8ee0f6acc9c035fe18a6447b9007dc0N
Size

37KB
Sample

240908-lztwrszbmp
MD5

a8ee0f6acc9c035fe18a6447b9007dc0
SHA1

7037037a9109904b47c06842559c9564ce047b68
SHA256

5b02654f2f4d42076312e8f6d5303ff5be3f4de6d95f53ce8c5e007773c5819f
SHA512

d367242739e0aed21d560b2140c40507dca617f0369e283fc2faa72102d1ea801fe355dba3ed329a0482a250d1e367bec45dc115f232f30d01f77445263b3459
SSDEEP

384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yD4h:MApQr0LvdFJI34nTkIU0Eych

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a8ee0f6acc9c035fe18a6447b9007dc0N
- Size
  
  37KB
- MD5
  
  a8ee0f6acc9c035fe18a6447b9007dc0
- SHA1
  
  7037037a9109904b47c06842559c9564ce047b68
- SHA256
  
  5b02654f2f4d42076312e8f6d5303ff5be3f4de6d95f53ce8c5e007773c5819f
- SHA512
  
  d367242739e0aed21d560b2140c40507dca617f0369e283fc2faa72102d1ea801fe355dba3ed329a0482a250d1e367bec45dc115f232f30d01f77445263b3459
- SSDEEP
  
  384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yD4h:MApQr0LvdFJI34nTkIU0Eych
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2