bd6f77ec6f654b65095a708d55dbd52c2edf718263953b4c2f3e09fb09ae5d05 | Triage

Sharing

General

Target

bd6f77ec6f654b65095a708d55dbd52c2edf718263953b4c2f3e09fb09ae5d05.exe
Size

37KB
Sample

241119-nb8q5avmdz
MD5

34653defc5590ad8ab791193ac4a9dde
SHA1

b8c4575d9c41184c03224a9f23e458a5f0b28ea2
SHA256

bd6f77ec6f654b65095a708d55dbd52c2edf718263953b4c2f3e09fb09ae5d05
SHA512

37b6d91801b5fd11701946cac2411750cef92e33e71665ea26f0cfdd270aee6ca8d2e9db9fcd48258304fedaedf86a6d9bc219f49eac458fa155d0fe210cca2b
SSDEEP

384:MApc8m4e0ovQak4JI341CLHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHP:MApQr0ovdFJI34eGxusOy9RIr

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  bd6f77ec6f654b65095a708d55dbd52c2edf718263953b4c2f3e09fb09ae5d05.exe
- Size
  
  37KB
- MD5
  
  34653defc5590ad8ab791193ac4a9dde
- SHA1
  
  b8c4575d9c41184c03224a9f23e458a5f0b28ea2
- SHA256
  
  bd6f77ec6f654b65095a708d55dbd52c2edf718263953b4c2f3e09fb09ae5d05
- SHA512
  
  37b6d91801b5fd11701946cac2411750cef92e33e71665ea26f0cfdd270aee6ca8d2e9db9fcd48258304fedaedf86a6d9bc219f49eac458fa155d0fe210cca2b
- SSDEEP
  
  384:MApc8m4e0ovQak4JI341CLHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHP:MApQr0ovdFJI34eGxusOy9RIr
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2