df95ced10b5f5d92a3c723b8889599a09fe68b1b3394df82bc6ab5df975fde43 | Triage

Sharing

General

Target

df95ced10b5f5d92a3c723b8889599a09fe68b1b3394df82bc6ab5df975fde43N
Size

26KB
Sample

241013-pqel9s1enj
MD5

a93ce4bb65d5290e340efae70b2fb3e0
SHA1

9018592f90be1a9d3abd122850c8d332e5ff415a
SHA256

df95ced10b5f5d92a3c723b8889599a09fe68b1b3394df82bc6ab5df975fde43
SHA512

19eee495c24b11544267a2bba862dbe4420defa608816f6ed6e5d91e766c6ac189f41db2128d8773f0a5b3b8a210d4cb860ce1f70b05df5022f01737c574e17f
SSDEEP

384:F3EqGY2HXgrS40Lol5ZLzH4VhvshYpATUgch1A9NB/erxUkoF/Z:F3EqG5H8PuoljH4vEhkgs1lxQFx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  df95ced10b5f5d92a3c723b8889599a09fe68b1b3394df82bc6ab5df975fde43N
- Size
  
  26KB
- MD5
  
  a93ce4bb65d5290e340efae70b2fb3e0
- SHA1
  
  9018592f90be1a9d3abd122850c8d332e5ff415a
- SHA256
  
  df95ced10b5f5d92a3c723b8889599a09fe68b1b3394df82bc6ab5df975fde43
- SHA512
  
  19eee495c24b11544267a2bba862dbe4420defa608816f6ed6e5d91e766c6ac189f41db2128d8773f0a5b3b8a210d4cb860ce1f70b05df5022f01737c574e17f
- SSDEEP
  
  384:F3EqGY2HXgrS40Lol5ZLzH4VhvshYpATUgch1A9NB/erxUkoF/Z:F3EqG5H8PuoljH4vEhkgs1lxQFx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2