2488d96783e58afb20bc71ca470e6642e2d2dbe935f7c165947d0749803c000f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a15b21c72766fdexeexeexeex.exe
Size

35KB
Sample

230709-kh1sbacd51
MD5

a15b21c72766fdf50262ed0187fc04c6
SHA1

b247b0b8e41c04ba5fbe82f2fab3497df717cc7b
SHA256

2488d96783e58afb20bc71ca470e6642e2d2dbe935f7c165947d0749803c000f
SHA512

e3bb6600c6b7ba8ed22f78c5652632cf1ae7b73064d69f755148b50750f9fba02f526c070dc42b35f735cdbae6660c9be0fa849ab55d3efe90ed51828d2821fb
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+72DxLFZ:bgX4zYcgTEu6QOaryfjqDlC76LFZ

Score

7^/10

Malware Config

Targets

- Target
  
  a15b21c72766fdexeexeexeex.exe
- Size
  
  35KB
- MD5
  
  a15b21c72766fdf50262ed0187fc04c6
- SHA1
  
  b247b0b8e41c04ba5fbe82f2fab3497df717cc7b
- SHA256
  
  2488d96783e58afb20bc71ca470e6642e2d2dbe935f7c165947d0749803c000f
- SHA512
  
  e3bb6600c6b7ba8ed22f78c5652632cf1ae7b73064d69f755148b50750f9fba02f526c070dc42b35f735cdbae6660c9be0fa849ab55d3efe90ed51828d2821fb
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+72DxLFZ:bgX4zYcgTEu6QOaryfjqDlC76LFZ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2