6cf77b0db1abd05162956aff8434cc35ed3dbd65d89ca3d8e2785a1eaaf40cfc | Triage

Sharing

General

Target

6cf77b0db1abd05162956aff8434cc35ed3dbd65d89ca3d8e2785a1eaaf40cfc.zip
Size

44.8MB
Sample

241120-dbcnksyngs
MD5

49f781e3edba9f2845c55d708ad8d04d
SHA1

6318d03679dafd454f71241485392d265f7fb67e
SHA256

6cf77b0db1abd05162956aff8434cc35ed3dbd65d89ca3d8e2785a1eaaf40cfc
SHA512

a42417616407c0e57cfb386395a84be5766419febd62511201fd603f03134a63c0c3492bf8298dc58fee5f85eb92fb680fdd0f753310e323cca379f9ab0414c3
SSDEEP

786432:sEdXR5JziP078zgE+M4yp3qEmmDKjR6rLFMNoZMKWS32mK6QDjfAK3baMSOZ143o:DdhLz58kNximmKgrLiNbKWpmvEjfRLFb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  tg-x64.exe
- Size
  
  45.2MB
- MD5
  
  65c23b196d8c066197b3d6e9fc3282a2
- SHA1
  
  7a2412047c4c9d9bd3648600240482122173cb44
- SHA256
  
  c84ddc7daab32f1835872b0afe99f3691d7ced32cbd253af31ea8a2f121afc15
- SHA512
  
  1c98f3ee1262af666c22411c18e08b0175887468bf1c186e19fa5ddd845083f36006ded99e11878f303910547bee3324dcc730628cd1b3214d382c37042831f2
- SSDEEP
  
  786432:pOq/jN3x1O1e7yR4mUsc4dtCO6eZST5u3TzmFIlgkAAXSo8K2ZdTq87JEE+cL1QE:L/ZB17y+tVq6eAc3T6FpkAjozKdTDlxR
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2