d7a5ccb4bea2b0193273d263d68aaf5abb9af0a9302bfbf5ca9d362996bf5862 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7a5ccb4bea2b0193273d263d68aaf5abb9af0a9302bfbf5ca9d362996bf5862N
Size

34KB
Sample

241014-1e6r6a1gnl
MD5

59b957f8ee2957a98436209b60e85700
SHA1

db45c61c222038496c79f1588fb20d01987fe6a9
SHA256

d7a5ccb4bea2b0193273d263d68aaf5abb9af0a9302bfbf5ca9d362996bf5862
SHA512

06269e1cfeeb98aef009fb2113532691ba8c72479d757bcd70ccdcceedbf91d7b1260fe18befbcba208b8508362c134edaa3431b8af96a452060093eb6c95db4
SSDEEP

384:MApc8m4e0ovQak4JI341CLHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHT:MApQr0ovdFJI34eGxusOy9RY

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d7a5ccb4bea2b0193273d263d68aaf5abb9af0a9302bfbf5ca9d362996bf5862N
- Size
  
  34KB
- MD5
  
  59b957f8ee2957a98436209b60e85700
- SHA1
  
  db45c61c222038496c79f1588fb20d01987fe6a9
- SHA256
  
  d7a5ccb4bea2b0193273d263d68aaf5abb9af0a9302bfbf5ca9d362996bf5862
- SHA512
  
  06269e1cfeeb98aef009fb2113532691ba8c72479d757bcd70ccdcceedbf91d7b1260fe18befbcba208b8508362c134edaa3431b8af96a452060093eb6c95db4
- SSDEEP
  
  384:MApc8m4e0ovQak4JI341CLHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHT:MApQr0ovdFJI34eGxusOy9RY
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2