65bc241872b826326b174a01d185a38954c7f2449293b8e368d5c5b0efb57861 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296f8df17742cbexeexeexeex.exe
Size

47KB
Sample

230706-pvzs1aba38
MD5

296f8df17742cb4b095ffc92846bfa5a
SHA1

311b7d9bf76f60171440c580e97c3f47f9d6a9aa
SHA256

65bc241872b826326b174a01d185a38954c7f2449293b8e368d5c5b0efb57861
SHA512

db6a211b77a4823abc71ff7b679608cb98f7c4daeb0e38201a493e38c4efedaf760ad825551ead9f1430f13ae1a5e8c6a11f848eb1eece11a229d6f3bc6b6952
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjZ1UKXJ0ToBpK223lam:ZzFbxmLPWQMOtEvwDpjbtJ0gATam

Score

7^/10

Malware Config

Targets

- Target
  
  296f8df17742cbexeexeexeex.exe
- Size
  
  47KB
- MD5
  
  296f8df17742cb4b095ffc92846bfa5a
- SHA1
  
  311b7d9bf76f60171440c580e97c3f47f9d6a9aa
- SHA256
  
  65bc241872b826326b174a01d185a38954c7f2449293b8e368d5c5b0efb57861
- SHA512
  
  db6a211b77a4823abc71ff7b679608cb98f7c4daeb0e38201a493e38c4efedaf760ad825551ead9f1430f13ae1a5e8c6a11f848eb1eece11a229d6f3bc6b6952
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjZ1UKXJ0ToBpK223lam:ZzFbxmLPWQMOtEvwDpjbtJ0gATam
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2