231edf45aeef4b49a7ab41b09f6f61992a1dc95d2e893fbc5ded9ad0d4542181 | Triage

Sharing

General

Target

1f362152763be5exeexeexeex.exe
Size

83KB
Sample

230705-yxeqaahb2t
MD5

1f362152763be58e49e5aa145f6d5612
SHA1

f994eef9691da1c1840de59ccc43d23e0a1c8c60
SHA256

231edf45aeef4b49a7ab41b09f6f61992a1dc95d2e893fbc5ded9ad0d4542181
SHA512

9c51175702dab265960e4aa58674f06cdc833da6c2b2fb321e7df20ce5042a90fb7e2e67171c67783fb624f122e121093ab1724eb6232da8ad558a8ac6df4c21
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnzvNG1p:ZzFbxmLPWQMOtEvwDpj386Sj/RsxQzd

Score

7^/10

Malware Config

Targets

- Target
  
  1f362152763be5exeexeexeex.exe
- Size
  
  83KB
- MD5
  
  1f362152763be58e49e5aa145f6d5612
- SHA1
  
  f994eef9691da1c1840de59ccc43d23e0a1c8c60
- SHA256
  
  231edf45aeef4b49a7ab41b09f6f61992a1dc95d2e893fbc5ded9ad0d4542181
- SHA512
  
  9c51175702dab265960e4aa58674f06cdc833da6c2b2fb321e7df20ce5042a90fb7e2e67171c67783fb624f122e121093ab1724eb6232da8ad558a8ac6df4c21
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnzvNG1p:ZzFbxmLPWQMOtEvwDpj386Sj/RsxQzd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2