9d2f899c04123e461d2372cd704edbc8ae88aa24bd65cecee176b02c268369c1 | Triage

Sharing

General

Target

9d2f899c04123e461d2372cd704edbc8ae88aa24bd65cecee176b02c268369c1N
Size

30KB
Sample

240919-d1wsrayfnj
MD5

94d3f1d9002c872bdb3a7ad252a7ed90
SHA1

ed9adb8d815c7ff3e388ee0241035eb2033a5671
SHA256

9d2f899c04123e461d2372cd704edbc8ae88aa24bd65cecee176b02c268369c1
SHA512

8e22eda398777898e333c04509c169b967af69d373c1e5c162f257664c82622b5731176ab2ca7072ac02f7d6e0cae6712a8776d1871f51921b9ce93bbc90aa6e
SSDEEP

768:SasBYMpat13vfdHldhwyEr+OGa0MN9VHGI:SnBYr13vfdHldhwd+OGa0MN9VHN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9d2f899c04123e461d2372cd704edbc8ae88aa24bd65cecee176b02c268369c1N
- Size
  
  30KB
- MD5
  
  94d3f1d9002c872bdb3a7ad252a7ed90
- SHA1
  
  ed9adb8d815c7ff3e388ee0241035eb2033a5671
- SHA256
  
  9d2f899c04123e461d2372cd704edbc8ae88aa24bd65cecee176b02c268369c1
- SHA512
  
  8e22eda398777898e333c04509c169b967af69d373c1e5c162f257664c82622b5731176ab2ca7072ac02f7d6e0cae6712a8776d1871f51921b9ce93bbc90aa6e
- SSDEEP
  
  768:SasBYMpat13vfdHldhwyEr+OGa0MN9VHGI:SnBYr13vfdHldhwd+OGa0MN9VHN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2