20139e342965305db9e3b3bc425b6c02203cb8495a95acdd2295992161d5ae5e | Triage

Sharing

General

Target

20139e342965305db9e3b3bc425b6c02203cb8495a95acdd2295992161d5ae5eN
Size

29KB
Sample

240928-bg6gqsyfkl
MD5

d4aa76f68208684dbaaa0939badb2440
SHA1

b809d327a842643fd94cb47e40a7fb5e1c20957f
SHA256

20139e342965305db9e3b3bc425b6c02203cb8495a95acdd2295992161d5ae5e
SHA512

927ff9ce9628f6972165c0c94abd6c696356acd0f239c7bed43aa8263551e25e23af8f3a1f723d3424269dca1372784cbfb407735c205a6e1baf8fe892138187
SSDEEP

384:WOnwR2nXFpOQGR9zos2clAKLHRN74u56/R9zZwu9IJ98:XwR0XOQ69zbjlAAX5e9zWw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  20139e342965305db9e3b3bc425b6c02203cb8495a95acdd2295992161d5ae5eN
- Size
  
  29KB
- MD5
  
  d4aa76f68208684dbaaa0939badb2440
- SHA1
  
  b809d327a842643fd94cb47e40a7fb5e1c20957f
- SHA256
  
  20139e342965305db9e3b3bc425b6c02203cb8495a95acdd2295992161d5ae5e
- SHA512
  
  927ff9ce9628f6972165c0c94abd6c696356acd0f239c7bed43aa8263551e25e23af8f3a1f723d3424269dca1372784cbfb407735c205a6e1baf8fe892138187
- SSDEEP
  
  384:WOnwR2nXFpOQGR9zos2clAKLHRN74u56/R9zZwu9IJ98:XwR0XOQ69zbjlAAX5e9zWw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2