b7446198c16d7bd84729e46f8cc5c485969701eea6fb0cd77d8bb42208df68b5 | Triage

Sharing

General

Target

b7446198c16d7bd84729e46f8cc5c485969701eea6fb0cd77d8bb42208df68b5
Size

10.4MB
Sample

240915-kewzysvarh
MD5

ab624aa0421559dc1e7f85f3b3f04292
SHA1

52c3ef4923a719e2770818117a55a7a87e97fab4
SHA256

b7446198c16d7bd84729e46f8cc5c485969701eea6fb0cd77d8bb42208df68b5
SHA512

4359a5fbd4914241bd7224ca384b3c4783074901b31f7f7c7726f25cdbcdcd2c9167010a1fb4357b2b713935651155d64b4edd7d20bb184d8cf04ab11038df40
SSDEEP

196608:uo9sdr8m8dYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOc7rp9A:z948dD4F3e+biSDcQwM8uDuNA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b7446198c16d7bd84729e46f8cc5c485969701eea6fb0cd77d8bb42208df68b5
- Size
  
  10.4MB
- MD5
  
  ab624aa0421559dc1e7f85f3b3f04292
- SHA1
  
  52c3ef4923a719e2770818117a55a7a87e97fab4
- SHA256
  
  b7446198c16d7bd84729e46f8cc5c485969701eea6fb0cd77d8bb42208df68b5
- SHA512
  
  4359a5fbd4914241bd7224ca384b3c4783074901b31f7f7c7726f25cdbcdcd2c9167010a1fb4357b2b713935651155d64b4edd7d20bb184d8cf04ab11038df40
- SSDEEP
  
  196608:uo9sdr8m8dYqsBmiFm4CTqfG+vTiwnDmNQkJM8uDIYnKOc7rp9A:z948dD4F3e+biSDcQwM8uDuNA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2