dfd7b2defc617f7b1aca1a48b3210a888f59c7ad3c184e2433cdb6b1feb4c9cc | Triage

Sharing

General

Target

5b808cdab31633exeexeexeex.exe
Size

44KB
Sample

230707-zgal3abf27
MD5

5b808cdab31633345fb0701890392d3c
SHA1

95a05e20f5ba94840c76c8ceec6dd9bb0dbb379c
SHA256

dfd7b2defc617f7b1aca1a48b3210a888f59c7ad3c184e2433cdb6b1feb4c9cc
SHA512

731a467205f35ac702aad33903b621fcea2c5bd4f60eeb8224e08f8d6e53b9e35197ea3a37704721894c5253c8999c80eb41d1c72d92bff352287ffb5619a7ec
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVajSKm5uzOHxulionQe:X6QFElP6n+gJQMOtEvwDpjBcSKm5upvN

Score

7^/10

Malware Config

Targets

- Target
  
  5b808cdab31633exeexeexeex.exe
- Size
  
  44KB
- MD5
  
  5b808cdab31633345fb0701890392d3c
- SHA1
  
  95a05e20f5ba94840c76c8ceec6dd9bb0dbb379c
- SHA256
  
  dfd7b2defc617f7b1aca1a48b3210a888f59c7ad3c184e2433cdb6b1feb4c9cc
- SHA512
  
  731a467205f35ac702aad33903b621fcea2c5bd4f60eeb8224e08f8d6e53b9e35197ea3a37704721894c5253c8999c80eb41d1c72d92bff352287ffb5619a7ec
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVajSKm5uzOHxulionQe:X6QFElP6n+gJQMOtEvwDpjBcSKm5upvN
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2