632e8f35a1c6fd46fb7f307bf440d61029676960a4ea18ba08b685a529955205 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99a8cfe32556502571860bab701b50c0N
Size

905KB
Sample

240913-gtrr1ayajn
MD5

99a8cfe32556502571860bab701b50c0
SHA1

a9f232d4595edf14ef65671ed5a1c8afd2c05a46
SHA256

632e8f35a1c6fd46fb7f307bf440d61029676960a4ea18ba08b685a529955205
SHA512

9b61b1c9cc56598f9afe8bb62c87ea983242e4d3ff4c84f90b2d886d1b99683a92f3e7b082aa9efd3bb15065a500b7560ca6dacdd1659bb7ab8f091e581b61da
SSDEEP

3072:tZTz1WIXC6GESSgWNRXumi7+IF6foPCaTRMXbaev0FQcmWk6kwsNIf6cHzbQ2v0V:tZHcIX9SSgMi+IFZMbQrkodzb4VF2Yd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  99a8cfe32556502571860bab701b50c0N
- Size
  
  905KB
- MD5
  
  99a8cfe32556502571860bab701b50c0
- SHA1
  
  a9f232d4595edf14ef65671ed5a1c8afd2c05a46
- SHA256
  
  632e8f35a1c6fd46fb7f307bf440d61029676960a4ea18ba08b685a529955205
- SHA512
  
  9b61b1c9cc56598f9afe8bb62c87ea983242e4d3ff4c84f90b2d886d1b99683a92f3e7b082aa9efd3bb15065a500b7560ca6dacdd1659bb7ab8f091e581b61da
- SSDEEP
  
  3072:tZTz1WIXC6GESSgWNRXumi7+IF6foPCaTRMXbaev0FQcmWk6kwsNIf6cHzbQ2v0V:tZHcIX9SSgMi+IFZMbQrkodzb4VF2Yd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2