a48b56dc04c653e40eca650bec4968df2a7fb4c9ee3eb31102491cbc483cd809 | Triage

Sharing

General

Target

a1aa4d985bd9198f051564a81b254e10N
Size

22KB
Sample

240913-agkdtstanm
MD5

a1aa4d985bd9198f051564a81b254e10
SHA1

1f317e8f47004a614c8e577af8e7e1e8c124a9b8
SHA256

a48b56dc04c653e40eca650bec4968df2a7fb4c9ee3eb31102491cbc483cd809
SHA512

23fe4b9f62c8d93a56169b0a21d5a6c4cf16a01d2ad7b50a01da79a943fae5ef7a94d4948ee21dc42169646a273472b7179950ba47a5c1ae1350dfc12590a11c
SSDEEP

384:+6C5SYpuESCgvATWe64rbbIbOS5O/lg7Vvi3:+6n0Sa+KIySWEvK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a1aa4d985bd9198f051564a81b254e10N
- Size
  
  22KB
- MD5
  
  a1aa4d985bd9198f051564a81b254e10
- SHA1
  
  1f317e8f47004a614c8e577af8e7e1e8c124a9b8
- SHA256
  
  a48b56dc04c653e40eca650bec4968df2a7fb4c9ee3eb31102491cbc483cd809
- SHA512
  
  23fe4b9f62c8d93a56169b0a21d5a6c4cf16a01d2ad7b50a01da79a943fae5ef7a94d4948ee21dc42169646a273472b7179950ba47a5c1ae1350dfc12590a11c
- SSDEEP
  
  384:+6C5SYpuESCgvATWe64rbbIbOS5O/lg7Vvi3:+6n0Sa+KIySWEvK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2