0b1365ced7539aab3adc7cb1487e68499f8eac68a7fd72baa191ebcf75783fbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7c75caf698be9c25d6195b7e2e537d0N
Size

26KB
Sample

240912-he326awcqq
MD5

a7c75caf698be9c25d6195b7e2e537d0
SHA1

143f2b60fb59f315b16a29b85b941f6959f1fee2
SHA256

0b1365ced7539aab3adc7cb1487e68499f8eac68a7fd72baa191ebcf75783fbb
SHA512

2c8ea8e13996d4231c52a1b7b7d8c48a05c4978db6d3f22f97531ba06f019a1b215ffeb451464a6a5570046adacfa01c8f40e1e1f27ad85715676558bdc7d43e
SSDEEP

384:Xz8qWI9TtGINz8PUAZL5G2WdLxSiPujRS9XQTXBupL9zN:XYqTTIINYPJZLOdLxxWjRSdQTXBu15N

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a7c75caf698be9c25d6195b7e2e537d0N
- Size
  
  26KB
- MD5
  
  a7c75caf698be9c25d6195b7e2e537d0
- SHA1
  
  143f2b60fb59f315b16a29b85b941f6959f1fee2
- SHA256
  
  0b1365ced7539aab3adc7cb1487e68499f8eac68a7fd72baa191ebcf75783fbb
- SHA512
  
  2c8ea8e13996d4231c52a1b7b7d8c48a05c4978db6d3f22f97531ba06f019a1b215ffeb451464a6a5570046adacfa01c8f40e1e1f27ad85715676558bdc7d43e
- SSDEEP
  
  384:Xz8qWI9TtGINz8PUAZL5G2WdLxSiPujRS9XQTXBupL9zN:XYqTTIINYPJZLOdLxxWjRSdQTXBu15N
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2