452947df0a41613610f2e3f5e3e4df8f37203fcceeba044e3ea51821dce1b6ad | Triage

Sharing

General

Target

452947df0a41613610f2e3f5e3e4df8f37203fcceeba044e3ea51821dce1b6adN
Size

37KB
Sample

240928-lrkccsygml
MD5

1e29bad4a375bc77369d87a9f2133780
SHA1

580a8c0864f875f979b227d205d030ee4c5987bd
SHA256

452947df0a41613610f2e3f5e3e4df8f37203fcceeba044e3ea51821dce1b6ad
SHA512

db707894788f838b4180ba8df29259a363c814192a4ad5458437b4b6b715d1f676dadade2b79d83cfec1be361e6f25762a99af1642831d34018cbf1f6d421997
SSDEEP

384:MApc8m4e0GvQak4JI341C0abnk6hJPohjLmyGo:MApQr0GvdFJI34qTk6hJPoVim

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  452947df0a41613610f2e3f5e3e4df8f37203fcceeba044e3ea51821dce1b6adN
- Size
  
  37KB
- MD5
  
  1e29bad4a375bc77369d87a9f2133780
- SHA1
  
  580a8c0864f875f979b227d205d030ee4c5987bd
- SHA256
  
  452947df0a41613610f2e3f5e3e4df8f37203fcceeba044e3ea51821dce1b6ad
- SHA512
  
  db707894788f838b4180ba8df29259a363c814192a4ad5458437b4b6b715d1f676dadade2b79d83cfec1be361e6f25762a99af1642831d34018cbf1f6d421997
- SSDEEP
  
  384:MApc8m4e0GvQak4JI341C0abnk6hJPohjLmyGo:MApQr0GvdFJI34qTk6hJPoVim
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2