d980a1fc5df13923ffc28cac04e06634ef12c24fb64313154641aa5dde1fc565 | Triage

Sharing

General

Target

d980a1fc5df13923ffc28cac04e06634ef12c24fb64313154641aa5dde1fc565
Size

48KB
Sample

241121-k8qp2a1fmk
MD5

04b66f6a1048da97b86998579c0ba6b5
SHA1

ab38b4f2a5acde82459314b04b453b1b177c5400
SHA256

d980a1fc5df13923ffc28cac04e06634ef12c24fb64313154641aa5dde1fc565
SHA512

0a22957ecb1a52ee9c34c7be32f54436e4aa8ef4506a1b789f30bd8246960dcee5f9a64ad8a3601407d11190efe7ca3efc9ed0cc4b4859b483048ff24fb6b7b0
SSDEEP

768:eApQr0GvdFJI34qGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENRFspFnp2N:eAapJlQsh7pWezEPJBjx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d980a1fc5df13923ffc28cac04e06634ef12c24fb64313154641aa5dde1fc565
- Size
  
  48KB
- MD5
  
  04b66f6a1048da97b86998579c0ba6b5
- SHA1
  
  ab38b4f2a5acde82459314b04b453b1b177c5400
- SHA256
  
  d980a1fc5df13923ffc28cac04e06634ef12c24fb64313154641aa5dde1fc565
- SHA512
  
  0a22957ecb1a52ee9c34c7be32f54436e4aa8ef4506a1b789f30bd8246960dcee5f9a64ad8a3601407d11190efe7ca3efc9ed0cc4b4859b483048ff24fb6b7b0
- SSDEEP
  
  768:eApQr0GvdFJI34qGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzENRFspFnp2N:eAapJlQsh7pWezEPJBjx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2