84d93cabe929e72fcfdbb69ee45b40a3c665126e4b74e9b538414c55a173a7fc | Triage

Sharing

General

Target

84d93cabe929e72fcfdbb69ee45b40a3c665126e4b74e9b538414c55a173a7fcN
Size

51KB
Sample

240921-vg1e9sshmg
MD5

d559829f41987a74b5f296332163d630
SHA1

e89ed54e458bb5d513ae9616d4a21f804b9a5eb4
SHA256

84d93cabe929e72fcfdbb69ee45b40a3c665126e4b74e9b538414c55a173a7fc
SHA512

2b2398a2f4624817f26a0785c7170e53acb9ba67fd43504c373c6323caa40ebac8ce7bc507413dc43d586323f1f7db6ac996064a0d8a58faebfef3eee78fdfb6
SSDEEP

768:l2EMQWlqBxRlHzZN2zJo3LeivGnCoPToFr1tptjFhav:0lqBxRlHzZN2zSPvDoPTojtptjzi

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  84d93cabe929e72fcfdbb69ee45b40a3c665126e4b74e9b538414c55a173a7fcN
- Size
  
  51KB
- MD5
  
  d559829f41987a74b5f296332163d630
- SHA1
  
  e89ed54e458bb5d513ae9616d4a21f804b9a5eb4
- SHA256
  
  84d93cabe929e72fcfdbb69ee45b40a3c665126e4b74e9b538414c55a173a7fc
- SHA512
  
  2b2398a2f4624817f26a0785c7170e53acb9ba67fd43504c373c6323caa40ebac8ce7bc507413dc43d586323f1f7db6ac996064a0d8a58faebfef3eee78fdfb6
- SSDEEP
  
  768:l2EMQWlqBxRlHzZN2zJo3LeivGnCoPToFr1tptjFhav:0lqBxRlHzZN2zSPvDoPTojtptjzi
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2