6dd857f6f519dfc119079b7a3148f6d53944e5816f9b738c03f0a4ed5f2c0ce0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6dd857f6f519dfc119079b7a3148f6d53944e5816f9b738c03f0a4ed5f2c0ce0
Size

1.1MB
Sample

240912-eqdd4a1akl
MD5

e3d2a60870b95880a43882c2a60a4abf
SHA1

c98d85684e7b1273325ee785616629b74658028e
SHA256

6dd857f6f519dfc119079b7a3148f6d53944e5816f9b738c03f0a4ed5f2c0ce0
SHA512

d9710f0bb8f1c2d284acef79ba59b1c3c243558a1b31f6366a6acc7778af40f55ec973a1bb53f684e92dfceab4c92ced0e13e76b9aa1126112f9dee4032e8376
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QN:acallSllG4ZM7QzMm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  6dd857f6f519dfc119079b7a3148f6d53944e5816f9b738c03f0a4ed5f2c0ce0
- Size
  
  1.1MB
- MD5
  
  e3d2a60870b95880a43882c2a60a4abf
- SHA1
  
  c98d85684e7b1273325ee785616629b74658028e
- SHA256
  
  6dd857f6f519dfc119079b7a3148f6d53944e5816f9b738c03f0a4ed5f2c0ce0
- SHA512
  
  d9710f0bb8f1c2d284acef79ba59b1c3c243558a1b31f6366a6acc7778af40f55ec973a1bb53f684e92dfceab4c92ced0e13e76b9aa1126112f9dee4032e8376
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5QN:acallSllG4ZM7QzMm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2