fd1dd4c7c9e74daa1c9e30565f445ac5d26ea81ccef4ad4af0fe70512d49302e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd1dd4c7c9e74daa1c9e30565f445ac5d26ea81ccef4ad4af0fe70512d49302e
Size

58KB
Sample

240912-d4qe5syhra
MD5

a4726fb2fd209752d673d6dbdfd92664
SHA1

14a84c58de17cc7d56d844e60779830d10d74284
SHA256

fd1dd4c7c9e74daa1c9e30565f445ac5d26ea81ccef4ad4af0fe70512d49302e
SHA512

c8d3487d2cac34c5c0ee3fcf3318414c8b514625a060db6d44e63a78e7205e19c52959e431d0559c5a7fe31a1f85f72ea13c59f58a52ad5c71da5be915451b00
SSDEEP

768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7iTR:MAaEJlosh7pWezEPJB+OeN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  fd1dd4c7c9e74daa1c9e30565f445ac5d26ea81ccef4ad4af0fe70512d49302e
- Size
  
  58KB
- MD5
  
  a4726fb2fd209752d673d6dbdfd92664
- SHA1
  
  14a84c58de17cc7d56d844e60779830d10d74284
- SHA256
  
  fd1dd4c7c9e74daa1c9e30565f445ac5d26ea81ccef4ad4af0fe70512d49302e
- SHA512
  
  c8d3487d2cac34c5c0ee3fcf3318414c8b514625a060db6d44e63a78e7205e19c52959e431d0559c5a7fe31a1f85f72ea13c59f58a52ad5c71da5be915451b00
- SSDEEP
  
  768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENREMZ7iTR:MAaEJlosh7pWezEPJB+OeN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2