e996d5fe56b9de583d08c083c9f48f723f17d18ac198483f0c3fb95f4db1266b | Triage

Sharing

General

Target

b17ff8e331cf13exeexeexeex.exe
Size

39KB
Sample

230709-s5f1esef2z
MD5

b17ff8e331cf13d44fb4ae91b405c2f6
SHA1

5c23a41b55a075286ae4d107efe13efbb9239b6e
SHA256

e996d5fe56b9de583d08c083c9f48f723f17d18ac198483f0c3fb95f4db1266b
SHA512

6eb018044da1cafe436e629058f5fd9fdc8ef3e9ba384a9fff4d12f3c4f4ed802a005e0a4de0ade4833de8d8cc2295cb05ea8c6ccccf54e1802bfe99d8e0efdb
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQLI3JUCoHzJ:V6QFElP6n+gMQMOtEvwDpjeJQybI

Score

7^/10

Malware Config

Targets

- Target
  
  b17ff8e331cf13exeexeexeex.exe
- Size
  
  39KB
- MD5
  
  b17ff8e331cf13d44fb4ae91b405c2f6
- SHA1
  
  5c23a41b55a075286ae4d107efe13efbb9239b6e
- SHA256
  
  e996d5fe56b9de583d08c083c9f48f723f17d18ac198483f0c3fb95f4db1266b
- SHA512
  
  6eb018044da1cafe436e629058f5fd9fdc8ef3e9ba384a9fff4d12f3c4f4ed802a005e0a4de0ade4833de8d8cc2295cb05ea8c6ccccf54e1802bfe99d8e0efdb
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQLI3JUCoHzJ:V6QFElP6n+gMQMOtEvwDpjeJQybI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2