9c015ba8ed19cec17d3c065cca69087b0410f050de9bbf07deb82a785f16599d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c015ba8ed19cec17d3c065cca69087b0410f050de9bbf07deb82a785f16599dN
Size

36KB
Sample

241006-dz8qxs1fmj
MD5

769a4d896a245f86242f2fd94f4f9030
SHA1

33d9890d87baa7ebed01d65fd17b67059e06e41d
SHA256

9c015ba8ed19cec17d3c065cca69087b0410f050de9bbf07deb82a785f16599d
SHA512

88c78e385e0c6310be2fcce1dfd11f5a51671a9a1998a548f7e9825b4248a0e5440bacc2bd33cb8d7b35e19e5ab0d5e816bb901e44f8ff30dcd7dc4bad9b34e3
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAM6:bc/y2lkF0+BN

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9c015ba8ed19cec17d3c065cca69087b0410f050de9bbf07deb82a785f16599dN
- Size
  
  36KB
- MD5
  
  769a4d896a245f86242f2fd94f4f9030
- SHA1
  
  33d9890d87baa7ebed01d65fd17b67059e06e41d
- SHA256
  
  9c015ba8ed19cec17d3c065cca69087b0410f050de9bbf07deb82a785f16599d
- SHA512
  
  88c78e385e0c6310be2fcce1dfd11f5a51671a9a1998a548f7e9825b4248a0e5440bacc2bd33cb8d7b35e19e5ab0d5e816bb901e44f8ff30dcd7dc4bad9b34e3
- SSDEEP
  
  768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAM6:bc/y2lkF0+BN
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2