4267e19b08643e876090305e7bbc9a235b8c7291f6a3b7c2ed6e768287ed5d67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ffec5521c62b5exeexeexeex.exe
Size

42KB
Sample

230705-y2dnsaff76
MD5

1ffec5521c62b5f33712e149ee183dd0
SHA1

3b3c7fd80fb8bab624c534526050809fce14093e
SHA256

4267e19b08643e876090305e7bbc9a235b8c7291f6a3b7c2ed6e768287ed5d67
SHA512

9ff3394d5693a0d0e5602622d6991c2cf08dd91db1158079bf6bada3b2faa9caf6235d0c0ad9cb1bd6c3a12e830745192d18617cf3e88cf83700fe738980129d
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kxh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XI

Score

7^/10

Malware Config

Targets

- Target
  
  1ffec5521c62b5exeexeexeex.exe
- Size
  
  42KB
- MD5
  
  1ffec5521c62b5f33712e149ee183dd0
- SHA1
  
  3b3c7fd80fb8bab624c534526050809fce14093e
- SHA256
  
  4267e19b08643e876090305e7bbc9a235b8c7291f6a3b7c2ed6e768287ed5d67
- SHA512
  
  9ff3394d5693a0d0e5602622d6991c2cf08dd91db1158079bf6bada3b2faa9caf6235d0c0ad9cb1bd6c3a12e830745192d18617cf3e88cf83700fe738980129d
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kxh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2