8b2c5b77f50d0a55a4234c88bf19e7e81f4838f009b0331a094aa0d2f4672b9f | Triage

Sharing

General

Target

8b2c5b77f50d0a55a4234c88bf19e7e81f4838f009b0331a094aa0d2f4672b9fN
Size

5KB
Sample

241012-3tapdascrj
MD5

62a41b3f85f972fc0213b28788199740
SHA1

a29637f7f9959f4a19f7f5018e69808c0e6177c6
SHA256

8b2c5b77f50d0a55a4234c88bf19e7e81f4838f009b0331a094aa0d2f4672b9f
SHA512

08d004f116e5fa9e46791528fc27b2b397629bc3ce33b51a2f6985d4238cc52cfb9399fdf4eb809c5a47dc28f317f2ef9292a82aed5d42b7dc5207537896d035
SSDEEP

96:ZSv4mQMKh9ctgCVRoKinKymV44zZjwxl7mo55LuxLq/:rmQMKsnzinKfzzRwXZ5QW/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  8b2c5b77f50d0a55a4234c88bf19e7e81f4838f009b0331a094aa0d2f4672b9fN
- Size
  
  5KB
- MD5
  
  62a41b3f85f972fc0213b28788199740
- SHA1
  
  a29637f7f9959f4a19f7f5018e69808c0e6177c6
- SHA256
  
  8b2c5b77f50d0a55a4234c88bf19e7e81f4838f009b0331a094aa0d2f4672b9f
- SHA512
  
  08d004f116e5fa9e46791528fc27b2b397629bc3ce33b51a2f6985d4238cc52cfb9399fdf4eb809c5a47dc28f317f2ef9292a82aed5d42b7dc5207537896d035
- SSDEEP
  
  96:ZSv4mQMKh9ctgCVRoKinKymV44zZjwxl7mo55LuxLq/:rmQMKsnzinKfzzRwXZ5QW/
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2