ad5f9d0d4ab7962410ef12e25905b220c823e30c34c8a2aa87804770cbefe81f | Triage

Sharing

General

Target

ad5f9d0d4ab7962410ef12e25905b220c823e30c34c8a2aa87804770cbefe81fN
Size

38KB
Sample

241002-bwpgrsthlf
MD5

63a69849a32d625b736b683403aeeb20
SHA1

f630d1071dc4d83c40bb8aeec7c4fb26d1a5d415
SHA256

ad5f9d0d4ab7962410ef12e25905b220c823e30c34c8a2aa87804770cbefe81f
SHA512

1a12e228b5a2a545c42d05774d7a4a3d21f8c53461d3f58306b3e1983c0c53c9ead95b5a1ec086bbdf598c4ad7451a1e781b0d6b2f5abb485375669f41e438d5
SSDEEP

384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yDN:MApQr0LvdFJI34nTkIU0EyB

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ad5f9d0d4ab7962410ef12e25905b220c823e30c34c8a2aa87804770cbefe81fN
- Size
  
  38KB
- MD5
  
  63a69849a32d625b736b683403aeeb20
- SHA1
  
  f630d1071dc4d83c40bb8aeec7c4fb26d1a5d415
- SHA256
  
  ad5f9d0d4ab7962410ef12e25905b220c823e30c34c8a2aa87804770cbefe81f
- SHA512
  
  1a12e228b5a2a545c42d05774d7a4a3d21f8c53461d3f58306b3e1983c0c53c9ead95b5a1ec086bbdf598c4ad7451a1e781b0d6b2f5abb485375669f41e438d5
- SSDEEP
  
  384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yDN:MApQr0LvdFJI34nTkIU0EyB
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2