a492f2442d6cd476ac5e344a1b1076e10c3896236e3bad6df5ceaad57724f9aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a492f2442d6cd476ac5e344a1b1076e10c3896236e3bad6df5ceaad57724f9aaN
Size

45KB
Sample

240927-ja3fha1glj
MD5

e9f39061a14b7271a8a2b062d234a6f0
SHA1

b6341f28d8a7d5610f4f132aec2a91fde2d67fb6
SHA256

a492f2442d6cd476ac5e344a1b1076e10c3896236e3bad6df5ceaad57724f9aa
SHA512

7074276c55fe304eec3698c5495ae69be0df1b864dfac0273141832b580d6804747464c8f282956ff55cf043df163a88db5ac1dd6ed9cda833e91e4e18de4437
SSDEEP

768:PXuk2ItF86gj/2S0mppSzKnladKNrlbJgi0vRW6z5RTg3n:PwVixkbnlOKNhl0Tza

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a492f2442d6cd476ac5e344a1b1076e10c3896236e3bad6df5ceaad57724f9aaN
- Size
  
  45KB
- MD5
  
  e9f39061a14b7271a8a2b062d234a6f0
- SHA1
  
  b6341f28d8a7d5610f4f132aec2a91fde2d67fb6
- SHA256
  
  a492f2442d6cd476ac5e344a1b1076e10c3896236e3bad6df5ceaad57724f9aa
- SHA512
  
  7074276c55fe304eec3698c5495ae69be0df1b864dfac0273141832b580d6804747464c8f282956ff55cf043df163a88db5ac1dd6ed9cda833e91e4e18de4437
- SSDEEP
  
  768:PXuk2ItF86gj/2S0mppSzKnladKNrlbJgi0vRW6z5RTg3n:PwVixkbnlOKNhl0Tza
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2