5cb2bb07453fb618fd5754e2a40a84c651b6b37be16ec98c1212fbe747df8120 | Triage

Sharing

General

Target

5cb2bb07453fb618fd5754e2a40a84c651b6b37be16ec98c1212fbe747df8120N
Size

19KB
Sample

241014-pnmj4avgpf
MD5

d8bf1ef88a3bd758d7ae78f791b24b40
SHA1

303c9fd3ed61e3730e0eb065ad06e1f3c8ac2d69
SHA256

5cb2bb07453fb618fd5754e2a40a84c651b6b37be16ec98c1212fbe747df8120
SHA512

50ef7ef38071ce6f1139fdef754c17b464733666a57bdec48233d182935561f60e9b758fb22f75ea6d840eb09a434e09529c0314c98e28f47c9b1da959f6e9e7
SSDEEP

384:qfRJYAySsaRbAEJb/0rZRwZBgs3CVyu850fEvkjzJYFK:qfRygBbJj0dRwzgvysfjEK

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  5cb2bb07453fb618fd5754e2a40a84c651b6b37be16ec98c1212fbe747df8120N
- Size
  
  19KB
- MD5
  
  d8bf1ef88a3bd758d7ae78f791b24b40
- SHA1
  
  303c9fd3ed61e3730e0eb065ad06e1f3c8ac2d69
- SHA256
  
  5cb2bb07453fb618fd5754e2a40a84c651b6b37be16ec98c1212fbe747df8120
- SHA512
  
  50ef7ef38071ce6f1139fdef754c17b464733666a57bdec48233d182935561f60e9b758fb22f75ea6d840eb09a434e09529c0314c98e28f47c9b1da959f6e9e7
- SSDEEP
  
  384:qfRJYAySsaRbAEJb/0rZRwZBgs3CVyu850fEvkjzJYFK:qfRygBbJj0dRwzgvysfjEK
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2