b18225a1feb5982ab5848cc18da5ec58cbe39a12b57454c305d99c47cc6f541a | Triage

Sharing

General

Target

b18225a1feb5982ab5848cc18da5ec58cbe39a12b57454c305d99c47cc6f541a
Size

1.1MB
Sample

240925-hs15qavarf
MD5

cddf9148b3fb09f3f261cf58bbd198b1
SHA1

74d3311bb91c9bd2e5c7dc1f27ed664e94c209ad
SHA256

b18225a1feb5982ab5848cc18da5ec58cbe39a12b57454c305d99c47cc6f541a
SHA512

d779a892b0eba64db7d21d408425ccee325ec1a870f2bda906441afdd9e7e08066351d428a7fbae72240655f4b3993cca65c6379c2c18bd076a2a4e44ac219d1
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QK:CcaClSFlG4ZM7QzMJ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b18225a1feb5982ab5848cc18da5ec58cbe39a12b57454c305d99c47cc6f541a
- Size
  
  1.1MB
- MD5
  
  cddf9148b3fb09f3f261cf58bbd198b1
- SHA1
  
  74d3311bb91c9bd2e5c7dc1f27ed664e94c209ad
- SHA256
  
  b18225a1feb5982ab5848cc18da5ec58cbe39a12b57454c305d99c47cc6f541a
- SHA512
  
  d779a892b0eba64db7d21d408425ccee325ec1a870f2bda906441afdd9e7e08066351d428a7fbae72240655f4b3993cca65c6379c2c18bd076a2a4e44ac219d1
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QK:CcaClSFlG4ZM7QzMJ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2