df4456499d1a71f95b729687626d607b6d434e99e9f375940cba8a72fb8df8c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df4456499d1a71f95b729687626d607b6d434e99e9f375940cba8a72fb8df8c5N
Size

21KB
Sample

240919-xcnl1stgnc
MD5

bba8ea50e4deb55562d21869330d78c0
SHA1

339e7094b49fa5a375b148134c877f3cea3489b6
SHA256

df4456499d1a71f95b729687626d607b6d434e99e9f375940cba8a72fb8df8c5
SHA512

04043fab1b578857a081d4e4dcef3a1bb6e870cfde62386944919133cacf3b5be8e7afc020add4c6f734d8a136e205d7db5677fe7222c8a8ac330708004c78df
SSDEEP

384:8r4M6Ddys/6iltv/6i2/0ZwcI0gMmks0sEz1n2Ux/itcQQzkQnhWfA5FdR8N7H/5:wjgys/6il1/6iy0ZwcI0gMmks0sEz1nA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  df4456499d1a71f95b729687626d607b6d434e99e9f375940cba8a72fb8df8c5N
- Size
  
  21KB
- MD5
  
  bba8ea50e4deb55562d21869330d78c0
- SHA1
  
  339e7094b49fa5a375b148134c877f3cea3489b6
- SHA256
  
  df4456499d1a71f95b729687626d607b6d434e99e9f375940cba8a72fb8df8c5
- SHA512
  
  04043fab1b578857a081d4e4dcef3a1bb6e870cfde62386944919133cacf3b5be8e7afc020add4c6f734d8a136e205d7db5677fe7222c8a8ac330708004c78df
- SSDEEP
  
  384:8r4M6Ddys/6iltv/6i2/0ZwcI0gMmks0sEz1n2Ux/itcQQzkQnhWfA5FdR8N7H/5:wjgys/6il1/6iy0ZwcI0gMmks0sEz1nA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2