2fcd9d6d3d1e565fad6018367c08302083015d8acd2aa9b633947201ca0d3960 | Triage

Sharing

General

Target

2fcd9d6d3d1e565fad6018367c08302083015d8acd2aa9b633947201ca0d3960.exe
Size

20KB
Sample

241121-jh2h6szanf
MD5

9461f59c4561c0cd37ced502812fd9d9
SHA1

164b7f0fce654168f4c392af40da56e70d8047fe
SHA256

2fcd9d6d3d1e565fad6018367c08302083015d8acd2aa9b633947201ca0d3960
SHA512

b59fae7b4add4651e627db175f1e25ac08216d01ec9979184899be3d23262a3352dcfe5bdf2ecd0a51bfaae7f17dd8b7536f99465ac55b290fc9fc94229a8d25
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4PRS1:hDXWipuE+K3/SSHgxmHZPRc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2fcd9d6d3d1e565fad6018367c08302083015d8acd2aa9b633947201ca0d3960.exe
- Size
  
  20KB
- MD5
  
  9461f59c4561c0cd37ced502812fd9d9
- SHA1
  
  164b7f0fce654168f4c392af40da56e70d8047fe
- SHA256
  
  2fcd9d6d3d1e565fad6018367c08302083015d8acd2aa9b633947201ca0d3960
- SHA512
  
  b59fae7b4add4651e627db175f1e25ac08216d01ec9979184899be3d23262a3352dcfe5bdf2ecd0a51bfaae7f17dd8b7536f99465ac55b290fc9fc94229a8d25
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYQMx+L4PRS1:hDXWipuE+K3/SSHgxmHZPRc
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2