67612b7b26f97ecdd12f7e8bf346c15f3ea6cc8e21a30456628d0f40afe8b97a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67612b7b26f97ecdd12f7e8bf346c15f3ea6cc8e21a30456628d0f40afe8b97a
Size

47KB
Sample

240908-ybdwvssbrl
MD5

b713be30542bd54eeb98cfc1161761d8
SHA1

160c73c28aab883dc2128bed7ead3c556718a86d
SHA256

67612b7b26f97ecdd12f7e8bf346c15f3ea6cc8e21a30456628d0f40afe8b97a
SHA512

c43cc7dc6df7bd2d88c6b2fe4ecea404ad38ad6349216e5c9472a76b2c36e66c56f748aa56ed9df773fea3933ea52fb685aa0d776a5622804b924617fc227dba
SSDEEP

768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoL5X:qmbhXDmjr5MOtEvwDpj5cDtKkQZQV5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  67612b7b26f97ecdd12f7e8bf346c15f3ea6cc8e21a30456628d0f40afe8b97a
- Size
  
  47KB
- MD5
  
  b713be30542bd54eeb98cfc1161761d8
- SHA1
  
  160c73c28aab883dc2128bed7ead3c556718a86d
- SHA256
  
  67612b7b26f97ecdd12f7e8bf346c15f3ea6cc8e21a30456628d0f40afe8b97a
- SHA512
  
  c43cc7dc6df7bd2d88c6b2fe4ecea404ad38ad6349216e5c9472a76b2c36e66c56f748aa56ed9df773fea3933ea52fb685aa0d776a5622804b924617fc227dba
- SSDEEP
  
  768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoL5X:qmbhXDmjr5MOtEvwDpj5cDtKkQZQV5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2