0f115aad465b704681733cb3c5110e68fed68436c624737433b7623bb4d84bd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f115aad465b704681733cb3c5110e68fed68436c624737433b7623bb4d84bd1
Size

1.1MB
Sample

240912-yyfnzasfkg
MD5

27419bfefe076b915dbd3f6513e99c88
SHA1

2930539ccf4360129b9930038da057fa0658c3ed
SHA256

0f115aad465b704681733cb3c5110e68fed68436c624737433b7623bb4d84bd1
SHA512

ddda681bc5b3a32865864979583e424c82d28d9ce32a43dbbef8e80a8be9884d9ae4cc9a2c93e09d99b847c8c5257aa726efe179449c6f75f2a28ee62aa46930
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QG:CcaClSFlG4ZM7QzMd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0f115aad465b704681733cb3c5110e68fed68436c624737433b7623bb4d84bd1
- Size
  
  1.1MB
- MD5
  
  27419bfefe076b915dbd3f6513e99c88
- SHA1
  
  2930539ccf4360129b9930038da057fa0658c3ed
- SHA256
  
  0f115aad465b704681733cb3c5110e68fed68436c624737433b7623bb4d84bd1
- SHA512
  
  ddda681bc5b3a32865864979583e424c82d28d9ce32a43dbbef8e80a8be9884d9ae4cc9a2c93e09d99b847c8c5257aa726efe179449c6f75f2a28ee62aa46930
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QG:CcaClSFlG4ZM7QzMd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2