1a8c0bf1998f186b047f7026c4eece9c0f28e6f33bb7527b96f1be2ba97b1bca | Triage

Sharing

General

Target

1a8c0bf1998f186b047f7026c4eece9c0f28e6f33bb7527b96f1be2ba97b1bca
Size

39KB
Sample

240913-xzz9bsvamf
MD5

57cbfee7a49ccf11c832e91a863bfd35
SHA1

c13d674b353a93250aa8f329ec6763dac7e1cc9d
SHA256

1a8c0bf1998f186b047f7026c4eece9c0f28e6f33bb7527b96f1be2ba97b1bca
SHA512

fb06c7c54c8666d3807719178eb69537878a63327253e536547a2434dfefc0a88528fd0f5ce50459b4342ccfd6e62b65b10e38dac9049ec0883a90c8ad8144c4
SSDEEP

768:pdA4TOKjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8tvCkA8SsBiaojlnk23lo:nA4TljXRrs9sINeZEtejlIkoLN127BFv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1a8c0bf1998f186b047f7026c4eece9c0f28e6f33bb7527b96f1be2ba97b1bca
- Size
  
  39KB
- MD5
  
  57cbfee7a49ccf11c832e91a863bfd35
- SHA1
  
  c13d674b353a93250aa8f329ec6763dac7e1cc9d
- SHA256
  
  1a8c0bf1998f186b047f7026c4eece9c0f28e6f33bb7527b96f1be2ba97b1bca
- SHA512
  
  fb06c7c54c8666d3807719178eb69537878a63327253e536547a2434dfefc0a88528fd0f5ce50459b4342ccfd6e62b65b10e38dac9049ec0883a90c8ad8144c4
- SSDEEP
  
  768:pdA4TOKjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8tvCkA8SsBiaojlnk23lo:nA4TljXRrs9sINeZEtejlIkoLN127BFv
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2