784752a9a288d6a1762b8931c29b31cabf2e2c45d78cc9630969dd345db061b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

784752a9a288d6a1762b8931c29b31cabf2e2c45d78cc9630969dd345db061b9N
Size

54KB
Sample

241004-qn2vfszhmf
MD5

7e568f5c4c527ad0d26dd5ddc917eed0
SHA1

070f2898e2a4e4d440f92f38a71fe6e0c8df24a4
SHA256

784752a9a288d6a1762b8931c29b31cabf2e2c45d78cc9630969dd345db061b9
SHA512

04550c9a9b1a6adb10d815485e82bc3136938224f41f5532e875feb9ba7c624e8eaddbdbe14b7ae81cbbb75131406f3942b9e6fc6d6e20353386f2a27bf80aac
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTJ:X6QFElP6n+gJBMOtEvwDpjBtExmlV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  784752a9a288d6a1762b8931c29b31cabf2e2c45d78cc9630969dd345db061b9N
- Size
  
  54KB
- MD5
  
  7e568f5c4c527ad0d26dd5ddc917eed0
- SHA1
  
  070f2898e2a4e4d440f92f38a71fe6e0c8df24a4
- SHA256
  
  784752a9a288d6a1762b8931c29b31cabf2e2c45d78cc9630969dd345db061b9
- SHA512
  
  04550c9a9b1a6adb10d815485e82bc3136938224f41f5532e875feb9ba7c624e8eaddbdbe14b7ae81cbbb75131406f3942b9e6fc6d6e20353386f2a27bf80aac
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTJ:X6QFElP6n+gJBMOtEvwDpjBtExmlV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2