d560635b9815be1e89c7a912b1fa85110079db12d2c7514a84f70fd18f4dd6b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d560635b9815be1e89c7a912b1fa85110079db12d2c7514a84f70fd18f4dd6b6N
Size

1.5MB
Sample

240921-2jwy7axhnm
MD5

e528170b0f467a129173392e5097b740
SHA1

9e8e625bb07cb0269694db58a555e2f1a842b170
SHA256

d560635b9815be1e89c7a912b1fa85110079db12d2c7514a84f70fd18f4dd6b6
SHA512

8f8c9ec5bc8615b84f61322019585719947f7fc9835f83e70f9cd850d4a73f931e26a4db5bf66780a2fbd78b540db694913b076c1a256450b22ba3d1da45229b
SSDEEP

24576:4W298E8ukTQcDiO1NGvhh4cU4k0/vzQTg/q0lzFadozu1+DuX3TzmWwivr6/TK:g98E8ukTqGGvhCcD0Tgy0LXu1qoTzmYt

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d560635b9815be1e89c7a912b1fa85110079db12d2c7514a84f70fd18f4dd6b6N
- Size
  
  1.5MB
- MD5
  
  e528170b0f467a129173392e5097b740
- SHA1
  
  9e8e625bb07cb0269694db58a555e2f1a842b170
- SHA256
  
  d560635b9815be1e89c7a912b1fa85110079db12d2c7514a84f70fd18f4dd6b6
- SHA512
  
  8f8c9ec5bc8615b84f61322019585719947f7fc9835f83e70f9cd850d4a73f931e26a4db5bf66780a2fbd78b540db694913b076c1a256450b22ba3d1da45229b
- SSDEEP
  
  24576:4W298E8ukTQcDiO1NGvhh4cU4k0/vzQTg/q0lzFadozu1+DuX3TzmWwivr6/TK:g98E8ukTqGGvhCcD0Tgy0LXu1qoTzmYt
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2