b30bf19ac08a3b26742e2088523306224ef627ffef605ffc43a0566fdad066ea | Triage

Sharing

General

Target

m4589881.exe
Size

211KB
Sample

230509-2y7dgaeh9y
MD5

2b17cbaf633234f8bbd588a0ad2e2763
SHA1

383b93a9f3dad345cae3817421c1c1c56d3ad87c
SHA256

b30bf19ac08a3b26742e2088523306224ef627ffef605ffc43a0566fdad066ea
SHA512

891c79719b2bd050b492616d3635ecdbfa460660fcb21447a36d07db1d620ddc7377d3f8356a62f400b711962a8b4356817450f8da00e6760abe8c8517ee2f30
SSDEEP

3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq

Score

7^/10

Malware Config

Targets

- Target
  
  m4589881.exe
- Size
  
  211KB
- MD5
  
  2b17cbaf633234f8bbd588a0ad2e2763
- SHA1
  
  383b93a9f3dad345cae3817421c1c1c56d3ad87c
- SHA256
  
  b30bf19ac08a3b26742e2088523306224ef627ffef605ffc43a0566fdad066ea
- SHA512
  
  891c79719b2bd050b492616d3635ecdbfa460660fcb21447a36d07db1d620ddc7377d3f8356a62f400b711962a8b4356817450f8da00e6760abe8c8517ee2f30
- SSDEEP
  
  3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2