b5d9d38d8285c25ea78f51e8ca4f733a32288304877008200f4fe387d6f274c9 | Triage

Resubmissions

11/05/2023, 15:59

230511-te7wwsgh51 10

11/05/2023, 15:55

230511-tc28mafc9s 7

Sharing

General

Target

Chase_Bank_Statement0143121402341.exe
Size

46.4MB
Sample

230511-tc28mafc9s
MD5

3b5b953161b67511571722028157e57b
SHA1

1850bc9b1e5b15318c248f12c8e306a304971c10
SHA256

b5d9d38d8285c25ea78f51e8ca4f733a32288304877008200f4fe387d6f274c9
SHA512

08a9fca3864faba290998d700fe29ed2adbe55e7418d605fb017ea030b476b88429a0c5f77867b7504cc0e7f51af9538112e98796c7033fd96a63aaa41946d35
SSDEEP

786432:7ZHQRRSZ5s9OYQ9huQDAwpu4MGxoxgoACrN4CDKsI9b:7ZHX69WhuQDAwsGKGc+CDPOb

Score

7^/10

Malware Config

Targets

- Target
  
  Chase_Bank_Statement0143121402341.exe
- Size
  
  46.4MB
- MD5
  
  3b5b953161b67511571722028157e57b
- SHA1
  
  1850bc9b1e5b15318c248f12c8e306a304971c10
- SHA256
  
  b5d9d38d8285c25ea78f51e8ca4f733a32288304877008200f4fe387d6f274c9
- SHA512
  
  08a9fca3864faba290998d700fe29ed2adbe55e7418d605fb017ea030b476b88429a0c5f77867b7504cc0e7f51af9538112e98796c7033fd96a63aaa41946d35
- SSDEEP
  
  786432:7ZHQRRSZ5s9OYQ9huQDAwpu4MGxoxgoACrN4CDKsI9b:7ZHX69WhuQDAwsGKGc+CDPOb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2