0a0c43dc3ae0645fd2ea8447f2cbc1e214a1331268c8c6d94e3116730a59d097 | Triage

Sharing

General

Target

0a0c43dc3ae0645fd2ea8447f2cbc1e214a1331268c8c6d94e3116730a59d097
Size

5.7MB
Sample

241012-w6gvwsyhkj
MD5

0b7d6b970540cfb3398f027a4e419e1d
SHA1

d0ae0fae289e1c2cba5ca6818f6436eb52b3f292
SHA256

0a0c43dc3ae0645fd2ea8447f2cbc1e214a1331268c8c6d94e3116730a59d097
SHA512

4178ab2350fccf853573120e4c5475aaa997cafd2b59e74cbf74fe000e2db746e30069076725273f7c90080691aac4784e099d7b1c4e7778cd0067c694e31cb1
SSDEEP

98304:oRi11Khs7CF4eSDgQsEgCtQYVGWvJkZrs//dZOGDeANfclHVEZuUTSQjVkFme6/K:oEmhACF4enqtQYYUeRsndZD/clHV8uK6

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0a0c43dc3ae0645fd2ea8447f2cbc1e214a1331268c8c6d94e3116730a59d097
- Size
  
  5.7MB
- MD5
  
  0b7d6b970540cfb3398f027a4e419e1d
- SHA1
  
  d0ae0fae289e1c2cba5ca6818f6436eb52b3f292
- SHA256
  
  0a0c43dc3ae0645fd2ea8447f2cbc1e214a1331268c8c6d94e3116730a59d097
- SHA512
  
  4178ab2350fccf853573120e4c5475aaa997cafd2b59e74cbf74fe000e2db746e30069076725273f7c90080691aac4784e099d7b1c4e7778cd0067c694e31cb1
- SSDEEP
  
  98304:oRi11Khs7CF4eSDgQsEgCtQYVGWvJkZrs//dZOGDeANfclHVEZuUTSQjVkFme6/K:oEmhACF4enqtQYYUeRsndZD/clHV8uK6
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2