4e942a35e8d3cdf4a8b994d786253b7c7a07935a4b223810df7d8f5b7498b967 | Triage

Sharing

General

Target

4e942a35e8d3cdf4a8b994d786253b7c7a07935a4b223810df7d8f5b7498b967N
Size

53KB
Sample

241009-v9k62szfrq
MD5

d143563c67f317a531147d6a9ee83000
SHA1

4b9e2542d023da1cbd0523f5695086f11318bafb
SHA256

4e942a35e8d3cdf4a8b994d786253b7c7a07935a4b223810df7d8f5b7498b967
SHA512

02c9d2b6804e5c998533cd7608ac860209150a35a13726dfc249b342892333eeadfee271c8fb8598c3d3ea369f34e3a4dc32c9a741f27620fd38a282607c4c4a
SSDEEP

1536:dNGg8r8Qpdbt7sX8q7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:8t7sXnJJjmLM3zRJWZsXy4Jd

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4e942a35e8d3cdf4a8b994d786253b7c7a07935a4b223810df7d8f5b7498b967N
- Size
  
  53KB
- MD5
  
  d143563c67f317a531147d6a9ee83000
- SHA1
  
  4b9e2542d023da1cbd0523f5695086f11318bafb
- SHA256
  
  4e942a35e8d3cdf4a8b994d786253b7c7a07935a4b223810df7d8f5b7498b967
- SHA512
  
  02c9d2b6804e5c998533cd7608ac860209150a35a13726dfc249b342892333eeadfee271c8fb8598c3d3ea369f34e3a4dc32c9a741f27620fd38a282607c4c4a
- SSDEEP
  
  1536:dNGg8r8Qpdbt7sX8q7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:8t7sXnJJjmLM3zRJWZsXy4Jd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2