c866bdd78a6a4db942996fd8e1f8eb9d59671342d68b0420eba0b1e7bfe22829 | Triage

Sharing

General

Target

c866bdd78a6a4db942996fd8e1f8eb9d59671342d68b0420eba0b1e7bfe22829
Size

53KB
Sample

241120-d8r5ja1cjn
MD5

95836c1ff25d978de79eecf48355acac
SHA1

2ccce16e9d8f159470631ecd68f210dd565c0bbb
SHA256

c866bdd78a6a4db942996fd8e1f8eb9d59671342d68b0420eba0b1e7bfe22829
SHA512

e44e8ed4e2fef6038f209ac2ac3d70348da5b02d9c8a7e9b9f59c299a1209f33bcd2c68e9c12bfb30a7722d0850278ea87dbe6129971a58f96a2aba9bd4a9a79
SSDEEP

1536:V6QFElP6n+gMQMOtEvwDpjyaLccCKdulcM:V6a+pOtEvwDpjv9M

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c866bdd78a6a4db942996fd8e1f8eb9d59671342d68b0420eba0b1e7bfe22829
- Size
  
  53KB
- MD5
  
  95836c1ff25d978de79eecf48355acac
- SHA1
  
  2ccce16e9d8f159470631ecd68f210dd565c0bbb
- SHA256
  
  c866bdd78a6a4db942996fd8e1f8eb9d59671342d68b0420eba0b1e7bfe22829
- SHA512
  
  e44e8ed4e2fef6038f209ac2ac3d70348da5b02d9c8a7e9b9f59c299a1209f33bcd2c68e9c12bfb30a7722d0850278ea87dbe6129971a58f96a2aba9bd4a9a79
- SSDEEP
  
  1536:V6QFElP6n+gMQMOtEvwDpjyaLccCKdulcM:V6a+pOtEvwDpjv9M
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2