e02f3734666a46e8b4fdb26c5428c0b7975afd3d3e84b86ace8b77402dbe8f13 | Triage

Sharing

General

Target

e02f3734666a46e8b4fdb26c5428c0b7975afd3d3e84b86ace8b77402dbe8f13
Size

64KB
Sample

241121-l2r5ys1lfw
MD5

940274e409d567690eb1b94956a9b6d5
SHA1

85180192edc6b064b60c2712b1326f8b01380a08
SHA256

e02f3734666a46e8b4fdb26c5428c0b7975afd3d3e84b86ace8b77402dbe8f13
SHA512

b6531dbdbaa1b27d8f1da1edf9aae212fb9f5b46f2317fe42f51dfe64f9a7dd2a85b0aaf73c72c2ecd78d170da9599d6e55d598ca3bfe3e56b5f3f51cd250ead
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnTZ:btng54SMLr+/AO/kIhfoKMHdaV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  e02f3734666a46e8b4fdb26c5428c0b7975afd3d3e84b86ace8b77402dbe8f13
- Size
  
  64KB
- MD5
  
  940274e409d567690eb1b94956a9b6d5
- SHA1
  
  85180192edc6b064b60c2712b1326f8b01380a08
- SHA256
  
  e02f3734666a46e8b4fdb26c5428c0b7975afd3d3e84b86ace8b77402dbe8f13
- SHA512
  
  b6531dbdbaa1b27d8f1da1edf9aae212fb9f5b46f2317fe42f51dfe64f9a7dd2a85b0aaf73c72c2ecd78d170da9599d6e55d598ca3bfe3e56b5f3f51cd250ead
- SSDEEP
  
  1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnTZ:btng54SMLr+/AO/kIhfoKMHdaV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2