32104c00261724ade56b3921c9a1b2af6c3e69d445dd8021495ae03b1a22cfaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32104c00261724ade56b3921c9a1b2af6c3e69d445dd8021495ae03b1a22cfaf
Size

1.1MB
Sample

240925-x1q22ssgrm
MD5

a1d8d460c3aea7b2b7c8242aa8da353a
SHA1

901b77b2e300a6c6a46fd48cf3fa4aa7468339f2
SHA256

32104c00261724ade56b3921c9a1b2af6c3e69d445dd8021495ae03b1a22cfaf
SHA512

ac37ea1c63abe447be18953cd710fb3ee5505d810d7dc564081a437b15339e94b18195d87f535de2cf6fd7a164d57c5535c01335b268a8e27cb72d967722a5c5
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qu:acallSllG4ZM7QzMF

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  32104c00261724ade56b3921c9a1b2af6c3e69d445dd8021495ae03b1a22cfaf
- Size
  
  1.1MB
- MD5
  
  a1d8d460c3aea7b2b7c8242aa8da353a
- SHA1
  
  901b77b2e300a6c6a46fd48cf3fa4aa7468339f2
- SHA256
  
  32104c00261724ade56b3921c9a1b2af6c3e69d445dd8021495ae03b1a22cfaf
- SHA512
  
  ac37ea1c63abe447be18953cd710fb3ee5505d810d7dc564081a437b15339e94b18195d87f535de2cf6fd7a164d57c5535c01335b268a8e27cb72d967722a5c5
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qu:acallSllG4ZM7QzMF
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2