0ddd962821ddfac5cd8f8560d8f1bdf37ed76c49caa18df757b4384587e223c1 | Triage

Sharing

General

Target

0ddd962821ddfac5cd8f8560d8f1bdf37ed76c49caa18df757b4384587e223c1N
Size

21KB
Sample

240919-dc6ytaxelj
MD5

bd454b010f00dc5be99b318d38b6ba90
SHA1

8861d5de4c9f8d706904949102e3e7e2a27d4fd4
SHA256

0ddd962821ddfac5cd8f8560d8f1bdf37ed76c49caa18df757b4384587e223c1
SHA512

a350585a6ad9550f61521d3f257cf59da52821b0adc20093e9af747d11a4eefa7f3d1a6ae0d707be6e4c0dcf3ee1cdd203f668a355900297ba3800450ec2ef73
SSDEEP

192:sG1iIX45y8txM/IEai1f21M7cgvd/L52S8nVX5dP3SxS2FjpgIhjNQrdC6/:sAI5y8tO/IgoM7cslMS8nL1h2FtEdCS

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0ddd962821ddfac5cd8f8560d8f1bdf37ed76c49caa18df757b4384587e223c1N
- Size
  
  21KB
- MD5
  
  bd454b010f00dc5be99b318d38b6ba90
- SHA1
  
  8861d5de4c9f8d706904949102e3e7e2a27d4fd4
- SHA256
  
  0ddd962821ddfac5cd8f8560d8f1bdf37ed76c49caa18df757b4384587e223c1
- SHA512
  
  a350585a6ad9550f61521d3f257cf59da52821b0adc20093e9af747d11a4eefa7f3d1a6ae0d707be6e4c0dcf3ee1cdd203f668a355900297ba3800450ec2ef73
- SSDEEP
  
  192:sG1iIX45y8txM/IEai1f21M7cgvd/L52S8nVX5dP3SxS2FjpgIhjNQrdC6/:sAI5y8tO/IgoM7cslMS8nL1h2FtEdCS
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2