6d26aa44f4495bed1470447392060adcb5808dbea05d09ea25880aaf510609b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f50c572833e82563cc953013f6446d80N
Size

35KB
Sample

240915-gertfsydqp
MD5

f50c572833e82563cc953013f6446d80
SHA1

6ff7c449af13d25db55cc76e713427bb07d4d116
SHA256

6d26aa44f4495bed1470447392060adcb5808dbea05d09ea25880aaf510609b0
SHA512

d880e6aaca88826bee01405367668fccaf7a1c9283148c705cab9f07b0e12f656c535d66ccfc7f81c689d0e9aaf6f5862c091101dc2277f7bd8bbbe86479fd98
SSDEEP

384:MApc8m4e0GvQak4JI341C0abnk6hJPawbZ0sDic/:MApQr0GvdFJI34qTk6hJPawyQic/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f50c572833e82563cc953013f6446d80N
- Size
  
  35KB
- MD5
  
  f50c572833e82563cc953013f6446d80
- SHA1
  
  6ff7c449af13d25db55cc76e713427bb07d4d116
- SHA256
  
  6d26aa44f4495bed1470447392060adcb5808dbea05d09ea25880aaf510609b0
- SHA512
  
  d880e6aaca88826bee01405367668fccaf7a1c9283148c705cab9f07b0e12f656c535d66ccfc7f81c689d0e9aaf6f5862c091101dc2277f7bd8bbbe86479fd98
- SSDEEP
  
  384:MApc8m4e0GvQak4JI341C0abnk6hJPawbZ0sDic/:MApQr0GvdFJI34qTk6hJPawyQic/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2