1eb50c66795b1fdc9dd02dceec7164d5c0a51a9dabaed1112e5d848170461252 | Triage

Sharing

General

Target

1eb50c66795b1fdc9dd02dceec7164d5c0a51a9dabaed1112e5d848170461252N
Size

25KB
Sample

240921-cttt5s1blr
MD5

dcea8cf96fbe641f78617391d21e6930
SHA1

7f3e3a73d43a93645c41fbf52be0fa0591e70d5f
SHA256

1eb50c66795b1fdc9dd02dceec7164d5c0a51a9dabaed1112e5d848170461252
SHA512

65337b25dab6a3ee389e89c6fbab0916af0177a2ecbd02abce3d7c87260e958281d20b4b4e1cb5d2509130f487f22ac9e05d4478feae09d1d2d342a1192dd4d5
SSDEEP

384:JC+EaVVpDSL/7wIUAch1A9NB/erdO9oMCCQcxbRxla0MUVVlI2vLqfZ7LLsH:JSfL/76As1FdMQ8RjacHvLyZ7LYH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1eb50c66795b1fdc9dd02dceec7164d5c0a51a9dabaed1112e5d848170461252N
- Size
  
  25KB
- MD5
  
  dcea8cf96fbe641f78617391d21e6930
- SHA1
  
  7f3e3a73d43a93645c41fbf52be0fa0591e70d5f
- SHA256
  
  1eb50c66795b1fdc9dd02dceec7164d5c0a51a9dabaed1112e5d848170461252
- SHA512
  
  65337b25dab6a3ee389e89c6fbab0916af0177a2ecbd02abce3d7c87260e958281d20b4b4e1cb5d2509130f487f22ac9e05d4478feae09d1d2d342a1192dd4d5
- SSDEEP
  
  384:JC+EaVVpDSL/7wIUAch1A9NB/erdO9oMCCQcxbRxla0MUVVlI2vLqfZ7LLsH:JSfL/76As1FdMQ8RjacHvLyZ7LYH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2