c130f4e2fb0ceea67880bcc72c343b56aac4e91ca9ced795a5cb58fa41c04ad2 | Triage

Sharing

General

Target

c130f4e2fb0ceea67880bcc72c343b56aac4e91ca9ced795a5cb58fa41c04ad2
Size

327KB
Sample

241120-dwjydsvjdr
MD5

d5593d3cf85d2fe35b3aedf655fd7507
SHA1

a0bcd56fdabdc1e3fa282fe80a40fdc3fa56ef44
SHA256

c130f4e2fb0ceea67880bcc72c343b56aac4e91ca9ced795a5cb58fa41c04ad2
SHA512

06abbb02fde9cf03d35a2e6a175f4aac25c161436bd285ce6f7ad7aab68529b755d56eb94af02f2f72519b8e98a7f5a2de607156f0513a248ecba23593bee2dc
SSDEEP

6144:p2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:p2TFafJiHCWBWPMjVWrXK0

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c130f4e2fb0ceea67880bcc72c343b56aac4e91ca9ced795a5cb58fa41c04ad2
- Size
  
  327KB
- MD5
  
  d5593d3cf85d2fe35b3aedf655fd7507
- SHA1
  
  a0bcd56fdabdc1e3fa282fe80a40fdc3fa56ef44
- SHA256
  
  c130f4e2fb0ceea67880bcc72c343b56aac4e91ca9ced795a5cb58fa41c04ad2
- SHA512
  
  06abbb02fde9cf03d35a2e6a175f4aac25c161436bd285ce6f7ad7aab68529b755d56eb94af02f2f72519b8e98a7f5a2de607156f0513a248ecba23593bee2dc
- SSDEEP
  
  6144:p2+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:p2TFafJiHCWBWPMjVWrXK0
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2