f868de331616392a73f169e336c2cd1dfdd72f87c67e0a93b582144d9457070a | Triage

Sharing

General

Target

f868de331616392a73f169e336c2cd1dfdd72f87c67e0a93b582144d9457070a
Size

1.1MB
Sample

240913-q9ebaataml
MD5

6971b3e1ac3a0bdbdc8dbb8d8b2d3a6c
SHA1

3f6e61324733af3c84cc8a108ee0591bfad98a96
SHA256

f868de331616392a73f169e336c2cd1dfdd72f87c67e0a93b582144d9457070a
SHA512

a99567234593d2a6eeefd8e000899eab5e4140e6207186ff4e80c17ba8bb163b11958a5a0f410e779a7df053e1348c92e4e1deb5816e8c8ba201061f127d5777
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qc:acallSllG4ZM7QzM7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f868de331616392a73f169e336c2cd1dfdd72f87c67e0a93b582144d9457070a
- Size
  
  1.1MB
- MD5
  
  6971b3e1ac3a0bdbdc8dbb8d8b2d3a6c
- SHA1
  
  3f6e61324733af3c84cc8a108ee0591bfad98a96
- SHA256
  
  f868de331616392a73f169e336c2cd1dfdd72f87c67e0a93b582144d9457070a
- SHA512
  
  a99567234593d2a6eeefd8e000899eab5e4140e6207186ff4e80c17ba8bb163b11958a5a0f410e779a7df053e1348c92e4e1deb5816e8c8ba201061f127d5777
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qc:acallSllG4ZM7QzM7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2