e512d9386e9bfcc748cc7ac22e562651b2e9346b461ad7c411f544158ae69b95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e512d9386e9bfcc748cc7ac22e562651b2e9346b461ad7c411f544158ae69b95
Size

1.1MB
Sample

240914-2kplha1cpa
MD5

5b1621a5ad7ddc68fa90127f669005a8
SHA1

30915f5649138368152a700d8f04eb40e7263373
SHA256

e512d9386e9bfcc748cc7ac22e562651b2e9346b461ad7c411f544158ae69b95
SHA512

c4cdd9ed9ec355a2290136758a3c5edc0a358b203f44945ec4ba7d10a518f7ca02dda2a95e52ffbb52b6aacfcbbf045ec3cc4ac28058fd68b5ef67318b34250b
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q5:acallSllG4ZM7QzMa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e512d9386e9bfcc748cc7ac22e562651b2e9346b461ad7c411f544158ae69b95
- Size
  
  1.1MB
- MD5
  
  5b1621a5ad7ddc68fa90127f669005a8
- SHA1
  
  30915f5649138368152a700d8f04eb40e7263373
- SHA256
  
  e512d9386e9bfcc748cc7ac22e562651b2e9346b461ad7c411f544158ae69b95
- SHA512
  
  c4cdd9ed9ec355a2290136758a3c5edc0a358b203f44945ec4ba7d10a518f7ca02dda2a95e52ffbb52b6aacfcbbf045ec3cc4ac28058fd68b5ef67318b34250b
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q5:acallSllG4ZM7QzMa
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2