5d63ff1157ee070bd451e6b5104de30f3973e03c4f95d1078922963d3fd7b846 | Triage

Sharing

General

Target

5d63ff1157ee070bd451e6b5104de30f3973e03c4f95d1078922963d3fd7b846
Size

1.1MB
Sample

240925-x1kv2awdjg
MD5

fc805aaf5e42ceeb89a2d70ea1073daa
SHA1

a12a18b346006b4d260c31daf20ebe304b2bc881
SHA256

5d63ff1157ee070bd451e6b5104de30f3973e03c4f95d1078922963d3fd7b846
SHA512

f24f87cb34436055f763912f4a3470982a99736e71b4fca6fe7f895261db8dbafd53ed8030ab0a628b39d5e215a42b68230e5549b398a3657d4f3f6b17c6a456
SSDEEP

24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QL:CcaClSFlG4ZM7QzM8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5d63ff1157ee070bd451e6b5104de30f3973e03c4f95d1078922963d3fd7b846
- Size
  
  1.1MB
- MD5
  
  fc805aaf5e42ceeb89a2d70ea1073daa
- SHA1
  
  a12a18b346006b4d260c31daf20ebe304b2bc881
- SHA256
  
  5d63ff1157ee070bd451e6b5104de30f3973e03c4f95d1078922963d3fd7b846
- SHA512
  
  f24f87cb34436055f763912f4a3470982a99736e71b4fca6fe7f895261db8dbafd53ed8030ab0a628b39d5e215a42b68230e5549b398a3657d4f3f6b17c6a456
- SSDEEP
  
  24576:CH0dl8myX9Bg42QoXFkrzkmmlSgRDko0lG4Z8r7Qfbkiu5QL:CcaClSFlG4ZM7QzM8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2