8a0aeffc68476d1348e0b40efc7eda8982e3bfb7947d6b63761351b25d2d9fc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f46b6955847aexeexeexeex.exe
Size

35KB
Sample

230709-t8t7wsef62
MD5

b6f46b6955847a61bd707f5bcf83032c
SHA1

4f8babd3e38375a97d4db5230eccfad571623e30
SHA256

8a0aeffc68476d1348e0b40efc7eda8982e3bfb7947d6b63761351b25d2d9fc2
SHA512

d64fbd0f9c46c2e114a15ffa0a5e31708a968c4924808e5dd2c9d650c5f3c4e7d181a2776c4161e612cf5addc31c4e896053bef71bc4be019f1587ae8a733b92
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+72DxLq:bgX4zYcgTEu6QOaryfjqDlC76Lq

Score

7^/10

Malware Config

Targets

- Target
  
  b6f46b6955847aexeexeexeex.exe
- Size
  
  35KB
- MD5
  
  b6f46b6955847a61bd707f5bcf83032c
- SHA1
  
  4f8babd3e38375a97d4db5230eccfad571623e30
- SHA256
  
  8a0aeffc68476d1348e0b40efc7eda8982e3bfb7947d6b63761351b25d2d9fc2
- SHA512
  
  d64fbd0f9c46c2e114a15ffa0a5e31708a968c4924808e5dd2c9d650c5f3c4e7d181a2776c4161e612cf5addc31c4e896053bef71bc4be019f1587ae8a733b92
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+72DxLq:bgX4zYcgTEu6QOaryfjqDlC76Lq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2