0c7bfea65f9b796f57ee415f1778c60fadcb837701e8934cad3a595828ebde26 | Triage

Sharing

General

Target

0c7bfea65f9b796f57ee415f1778c60fadcb837701e8934cad3a595828ebde26.exe
Size

15KB
Sample

241121-mpvwrawkbr
MD5

5bd67957a7626b7533f521f54efcb071
SHA1

7e5858959534e892d3dc56ce8a08548b6b9eda9f
SHA256

0c7bfea65f9b796f57ee415f1778c60fadcb837701e8934cad3a595828ebde26
SHA512

c735ad2d292a4bcb5043977d952b435c05010a53451a6d7e2bfc86b664dae44a1ff585af51ba2f8ea627d230661dbf1c443486e1e7fbbcabd9d75a751ef30e13
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYq445:hDXWipuE+K3/SSHgxmq445

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  0c7bfea65f9b796f57ee415f1778c60fadcb837701e8934cad3a595828ebde26.exe
- Size
  
  15KB
- MD5
  
  5bd67957a7626b7533f521f54efcb071
- SHA1
  
  7e5858959534e892d3dc56ce8a08548b6b9eda9f
- SHA256
  
  0c7bfea65f9b796f57ee415f1778c60fadcb837701e8934cad3a595828ebde26
- SHA512
  
  c735ad2d292a4bcb5043977d952b435c05010a53451a6d7e2bfc86b664dae44a1ff585af51ba2f8ea627d230661dbf1c443486e1e7fbbcabd9d75a751ef30e13
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYq445:hDXWipuE+K3/SSHgxmq445
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2