a2c74b2c60ef4eb67b2340b2f1680943ccc6123f4d79e2f0cd9d1440d477c7df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0894278968c276exeexeexeex.exe
Size

36KB
Sample

230705-szev6sfa6z
MD5

0894278968c2762c469b3734470a0df9
SHA1

9f60dc005fbcb6f41a22b6ad22a0a30db20596fb
SHA256

a2c74b2c60ef4eb67b2340b2f1680943ccc6123f4d79e2f0cd9d1440d477c7df
SHA512

09621d1e4c1e2269c273748e011c3dfb49b4fda40f278b309957b42384a9519733c053fdc65a7294e1973c7cc2abef0c40fbdc35133e748d1bf63a7513fed545
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+72kmGYjls:bgX4zYcgTEu6QOaryfjqDlC7rYZs

Score

7^/10

Malware Config

Targets

- Target
  
  0894278968c276exeexeexeex.exe
- Size
  
  36KB
- MD5
  
  0894278968c2762c469b3734470a0df9
- SHA1
  
  9f60dc005fbcb6f41a22b6ad22a0a30db20596fb
- SHA256
  
  a2c74b2c60ef4eb67b2340b2f1680943ccc6123f4d79e2f0cd9d1440d477c7df
- SHA512
  
  09621d1e4c1e2269c273748e011c3dfb49b4fda40f278b309957b42384a9519733c053fdc65a7294e1973c7cc2abef0c40fbdc35133e748d1bf63a7513fed545
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+72kmGYjls:bgX4zYcgTEu6QOaryfjqDlC7rYZs
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2