78049be8014c4c97c0e0d6657a78d1d2235e080771079c3cf570d69c559e38b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b303b4944de9e7e00adda207e1b49030N
Size

90KB
Sample

240914-w2b4vaybqq
MD5

b303b4944de9e7e00adda207e1b49030
SHA1

5b74607571b6c62debafd483bfc2f1512a2635d7
SHA256

78049be8014c4c97c0e0d6657a78d1d2235e080771079c3cf570d69c559e38b0
SHA512

8f6b9cbea1f52ec68d61ba2d2a5814225bcb874b956ec98e9152a680b3df233ec7a170fa64daaa1e9c2c7872e6808770bacd368680e29048ca9c6cf4a6a6c40d
SSDEEP

1536:ozfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfc6QkAbtN:+fMNE1JG6XMk27EbpOthl0ZUed06QTH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b303b4944de9e7e00adda207e1b49030N
- Size
  
  90KB
- MD5
  
  b303b4944de9e7e00adda207e1b49030
- SHA1
  
  5b74607571b6c62debafd483bfc2f1512a2635d7
- SHA256
  
  78049be8014c4c97c0e0d6657a78d1d2235e080771079c3cf570d69c559e38b0
- SHA512
  
  8f6b9cbea1f52ec68d61ba2d2a5814225bcb874b956ec98e9152a680b3df233ec7a170fa64daaa1e9c2c7872e6808770bacd368680e29048ca9c6cf4a6a6c40d
- SSDEEP
  
  1536:ozfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfc6QkAbtN:+fMNE1JG6XMk27EbpOthl0ZUed06QTH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2