a70747cdacd2d80dd65df4933286f8497d40e5fedac5317f060529bdcaebb33e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a70747cdacd2d80dd65df4933286f8497d40e5fedac5317f060529bdcaebb33e
Size

1.1MB
Sample

240914-1px8rsydqc
MD5

28e86566a92043cda0e9da3c61f24009
SHA1

58d28e75efdca6925a41d62efb3625d8c1b6eb4b
SHA256

a70747cdacd2d80dd65df4933286f8497d40e5fedac5317f060529bdcaebb33e
SHA512

d58fb3989c3b5046659aff2e592febdf16732b6bec52304cde8ea10e77bb667aac6efa80deff2da9681fd30e961e32e1d3403c3a1aba50f3b33efcfbfd729ff5
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QW:CcaClSFlG4ZM7QzMt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a70747cdacd2d80dd65df4933286f8497d40e5fedac5317f060529bdcaebb33e
- Size
  
  1.1MB
- MD5
  
  28e86566a92043cda0e9da3c61f24009
- SHA1
  
  58d28e75efdca6925a41d62efb3625d8c1b6eb4b
- SHA256
  
  a70747cdacd2d80dd65df4933286f8497d40e5fedac5317f060529bdcaebb33e
- SHA512
  
  d58fb3989c3b5046659aff2e592febdf16732b6bec52304cde8ea10e77bb667aac6efa80deff2da9681fd30e961e32e1d3403c3a1aba50f3b33efcfbfd729ff5
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QW:CcaClSFlG4ZM7QzMt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2