7db226ce1cc2033c23d2debcb1480326c148138f57be405cff75243fcf142c09 | Triage

Sharing

General

Target

7db226ce1cc2033c23d2debcb1480326c148138f57be405cff75243fcf142c09N
Size

60KB
Sample

240919-g9esdavgqr
MD5

d1b0981825d40ce5b875b18b79b125e0
SHA1

b0238f58220b25d3f75f2c5d695acbf8c2d8eb53
SHA256

7db226ce1cc2033c23d2debcb1480326c148138f57be405cff75243fcf142c09
SHA512

b24d969fe77d8aab4042509a46777279c7c3992978ed1f3e8103010f5fb2b3a764e953c20a1912e0de4aea2d8e35517a5c0a73cdaf90f6c9633a324023824f08
SSDEEP

384:asjPGY2HXgrkEYYhQ98E8I1XAV/QcaYpATUgch1A9NB/erxFpktRB+bQ:aePG5H8XhKD8ISZQjkgs1lxFQu8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7db226ce1cc2033c23d2debcb1480326c148138f57be405cff75243fcf142c09N
- Size
  
  60KB
- MD5
  
  d1b0981825d40ce5b875b18b79b125e0
- SHA1
  
  b0238f58220b25d3f75f2c5d695acbf8c2d8eb53
- SHA256
  
  7db226ce1cc2033c23d2debcb1480326c148138f57be405cff75243fcf142c09
- SHA512
  
  b24d969fe77d8aab4042509a46777279c7c3992978ed1f3e8103010f5fb2b3a764e953c20a1912e0de4aea2d8e35517a5c0a73cdaf90f6c9633a324023824f08
- SSDEEP
  
  384:asjPGY2HXgrkEYYhQ98E8I1XAV/QcaYpATUgch1A9NB/erxFpktRB+bQ:aePG5H8XhKD8ISZQjkgs1lxFQu8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2