9b6c56b5d0be7bccda5b18ab6fee894c2cb9492a250fdf12c9da560a20cd4893 | Triage

Sharing

General

Target

9b6c56b5d0be7bccda5b18ab6fee894c2cb9492a250fdf12c9da560a20cd4893N
Size

164KB
Sample

241012-dyrq1szhrh
MD5

21a52d23bd6659afc51a8270ee4d8410
SHA1

44b2069cd5397a6d9f1d20b3eb447a26f97d1af3
SHA256

9b6c56b5d0be7bccda5b18ab6fee894c2cb9492a250fdf12c9da560a20cd4893
SHA512

bba2d14886c6044210955fd3270819361d0dc424c01f3a4f2b39167dd4ad68e0c75a5c392c34e721d244efe27b76b30650d0c85ee27c6cf34bf5030bb76b766b
SSDEEP

3072:kiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5h:/iilhmIQODDHBJdmOHIFs

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  9b6c56b5d0be7bccda5b18ab6fee894c2cb9492a250fdf12c9da560a20cd4893N
- Size
  
  164KB
- MD5
  
  21a52d23bd6659afc51a8270ee4d8410
- SHA1
  
  44b2069cd5397a6d9f1d20b3eb447a26f97d1af3
- SHA256
  
  9b6c56b5d0be7bccda5b18ab6fee894c2cb9492a250fdf12c9da560a20cd4893
- SHA512
  
  bba2d14886c6044210955fd3270819361d0dc424c01f3a4f2b39167dd4ad68e0c75a5c392c34e721d244efe27b76b30650d0c85ee27c6cf34bf5030bb76b766b
- SSDEEP
  
  3072:kiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5h:/iilhmIQODDHBJdmOHIFs
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2