3e7ce7699a593f1d639a4aa2c8677a3de3ecff16703ab56bc7fea72236c3792a | Triage

Sharing

General

Target

ce5c4f58083434d5fe6f9e070a7a1c53.exe
Size

580KB
Sample

230104-p2cl2sfe96
MD5

ce5c4f58083434d5fe6f9e070a7a1c53
SHA1

f8264dfb89cc00365e61810e860916ee9a461ae2
SHA256

3e7ce7699a593f1d639a4aa2c8677a3de3ecff16703ab56bc7fea72236c3792a
SHA512

588ca0d4dc723010eb30a50bb71101d0370a59bd5fef01283a655bfa930f789349afc27f3df7b4f1f5b5942d484cc1852f68abb0c75874bbecba52172be9febb
SSDEEP

12288:5nXijMFGimJdnrMqJGWK6ahfqeKTTkmB/cIuYJ0SYXs5q24G6:5nXi9im3rMqJGWKtniZu

Score

8^/10

Malware Config

Targets

- Target
  
  ce5c4f58083434d5fe6f9e070a7a1c53.exe
- Size
  
  580KB
- MD5
  
  ce5c4f58083434d5fe6f9e070a7a1c53
- SHA1
  
  f8264dfb89cc00365e61810e860916ee9a461ae2
- SHA256
  
  3e7ce7699a593f1d639a4aa2c8677a3de3ecff16703ab56bc7fea72236c3792a
- SHA512
  
  588ca0d4dc723010eb30a50bb71101d0370a59bd5fef01283a655bfa930f789349afc27f3df7b4f1f5b5942d484cc1852f68abb0c75874bbecba52172be9febb
- SSDEEP
  
  12288:5nXijMFGimJdnrMqJGWK6ahfqeKTTkmB/cIuYJ0SYXs5q24G6:5nXi9im3rMqJGWKtniZu
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2