ffd17706e19dc839e1e3130e9f5a634ac9791b3b596008483b2701d38103037e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd17706e19dc839e1e3130e9f5a634ac9791b3b596008483b2701d38103037e
Size

21KB
Sample

240913-eh3c9atdne
MD5

08ebc7254c0b46e7d8c9294758db652c
SHA1

3da50d60b8e5f5741aaa1e73ed0a0107f23c7c24
SHA256

ffd17706e19dc839e1e3130e9f5a634ac9791b3b596008483b2701d38103037e
SHA512

6157d325763220aec337b29510613ae9273deedbf4950d50e1b4c58294ede0ec199ea2fbfd6c6f823a485158f2ec55876035f7d094c95dc6dde34eee7e98c77c
SSDEEP

384:M/VfvRZsvqlbLiLPnH3KYgjffU01cRYpi/zzH1:afvoilb2jaYgYRVXH1

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ffd17706e19dc839e1e3130e9f5a634ac9791b3b596008483b2701d38103037e
- Size
  
  21KB
- MD5
  
  08ebc7254c0b46e7d8c9294758db652c
- SHA1
  
  3da50d60b8e5f5741aaa1e73ed0a0107f23c7c24
- SHA256
  
  ffd17706e19dc839e1e3130e9f5a634ac9791b3b596008483b2701d38103037e
- SHA512
  
  6157d325763220aec337b29510613ae9273deedbf4950d50e1b4c58294ede0ec199ea2fbfd6c6f823a485158f2ec55876035f7d094c95dc6dde34eee7e98c77c
- SSDEEP
  
  384:M/VfvRZsvqlbLiLPnH3KYgjffU01cRYpi/zzH1:afvoilb2jaYgYRVXH1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2