964702eaeb7dfd5d8cab8cd057579d4b74317afb05d1aef093e60507bd62f341 | Triage

Sharing

General

Target

964702eaeb7dfd5d8cab8cd057579d4b74317afb05d1aef093e60507bd62f341
Size

1.1MB
Sample

240913-tgx5gaxame
MD5

2247f67bd4d02fd2f444f2d874e39270
SHA1

471a9ab4347d7d60170c25b5144597c190119198
SHA256

964702eaeb7dfd5d8cab8cd057579d4b74317afb05d1aef093e60507bd62f341
SHA512

0e54d59944b11608ce793c1e98c54e31fffc097bd08e762152c87b90bdec4f13d83791a8a9ca631726957e78404c5124eb5ebfbad527c04266c2bb0ab3ba0423
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qo:acallSllG4ZM7QzMP

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  964702eaeb7dfd5d8cab8cd057579d4b74317afb05d1aef093e60507bd62f341
- Size
  
  1.1MB
- MD5
  
  2247f67bd4d02fd2f444f2d874e39270
- SHA1
  
  471a9ab4347d7d60170c25b5144597c190119198
- SHA256
  
  964702eaeb7dfd5d8cab8cd057579d4b74317afb05d1aef093e60507bd62f341
- SHA512
  
  0e54d59944b11608ce793c1e98c54e31fffc097bd08e762152c87b90bdec4f13d83791a8a9ca631726957e78404c5124eb5ebfbad527c04266c2bb0ab3ba0423
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qo:acallSllG4ZM7QzMP
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2