64bd582426bd08e76d132f7e108bb413ed10c0915c574a444bd28439c489bc1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64bd582426bd08e76d132f7e108bb413ed10c0915c574a444bd28439c489bc1e
Size

59KB
Sample

240918-2anapawgjn
MD5

c7da1f50799770495c96effee7b01626
SHA1

515ae0b41f6940b386f5b721d61beac7912ca2a0
SHA256

64bd582426bd08e76d132f7e108bb413ed10c0915c574a444bd28439c489bc1e
SHA512

34149842f07af3dd668b7009ba22a10ad6b5085c0f25e83a6411901cad96d7284d6e07b0d0cc5614bad6f55c37c631bb3ee24eb51372728d94757cd2790621ea
SSDEEP

384:asjPGY2HXgrkEYYhQ98E8I1XAV/QcaYpATUgch1A9NB/erxFpkoM/:aePG5H8XhKD8ISZQjkgs1lxF96

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  64bd582426bd08e76d132f7e108bb413ed10c0915c574a444bd28439c489bc1e
- Size
  
  59KB
- MD5
  
  c7da1f50799770495c96effee7b01626
- SHA1
  
  515ae0b41f6940b386f5b721d61beac7912ca2a0
- SHA256
  
  64bd582426bd08e76d132f7e108bb413ed10c0915c574a444bd28439c489bc1e
- SHA512
  
  34149842f07af3dd668b7009ba22a10ad6b5085c0f25e83a6411901cad96d7284d6e07b0d0cc5614bad6f55c37c631bb3ee24eb51372728d94757cd2790621ea
- SSDEEP
  
  384:asjPGY2HXgrkEYYhQ98E8I1XAV/QcaYpATUgch1A9NB/erxFpkoM/:aePG5H8XhKD8ISZQjkgs1lxF96
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2