eb6b00415734c760adfae405b46ca86f82a342fb56af304816185740ba24b7f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86516f23ac353dexeexeexeex.exe
Size

36KB
Sample

230708-vp68saga24
MD5

86516f23ac353df0586de09536130f09
SHA1

fdc666b2d021f270c1c2646ff347e7ab9e8dc27f
SHA256

eb6b00415734c760adfae405b46ca86f82a342fb56af304816185740ba24b7f9
SHA512

0e2b9f12eefeb7c15ab43ec24fff4eecc1defe930591307d4c93292565cb80af369c7eb1ad64f7a53bc7f781681e8ab7747ae1fdce654520b04e0c6d0267a9f5
SSDEEP

384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xf4p8ACMl1qI6+QXghR:bIDOw9UiaCHfjnE0Sf88AvvP1oghRn3

Score

7^/10

Malware Config

Targets

- Target
  
  86516f23ac353dexeexeexeex.exe
- Size
  
  36KB
- MD5
  
  86516f23ac353df0586de09536130f09
- SHA1
  
  fdc666b2d021f270c1c2646ff347e7ab9e8dc27f
- SHA256
  
  eb6b00415734c760adfae405b46ca86f82a342fb56af304816185740ba24b7f9
- SHA512
  
  0e2b9f12eefeb7c15ab43ec24fff4eecc1defe930591307d4c93292565cb80af369c7eb1ad64f7a53bc7f781681e8ab7747ae1fdce654520b04e0c6d0267a9f5
- SSDEEP
  
  384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xf4p8ACMl1qI6+QXghR:bIDOw9UiaCHfjnE0Sf88AvvP1oghRn3
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2