47d9c4ca6c7d3a7412f22e0806b373e4982fbc33fecd95e1630c9beff6c8915b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3388b4b593940exeexeexeex.exe
Size

61KB
Sample

230710-rah1vsca3x
MD5

c3388b4b59394068ff850d4a265490e0
SHA1

66bb81d725a0bb83a1c7a6f306655ab0b9c9c26f
SHA256

47d9c4ca6c7d3a7412f22e0806b373e4982fbc33fecd95e1630c9beff6c8915b
SHA512

73a24d238063e5aa5bb8782e68a8dfd3a8448647ab721e4fb2c98d445109278aebdc6e95206dc58ea550cba7306c268b90a6041dfe1d0f499dd223c8ec98da6c
SSDEEP

1536:vj+jsMQMOtEvwDpj5HyCyh7vtRJ4BqKb1cKtqPd:vCjsIOtEvwDpj5Hv0D

Score

7^/10

Malware Config

Targets

- Target
  
  c3388b4b593940exeexeexeex.exe
- Size
  
  61KB
- MD5
  
  c3388b4b59394068ff850d4a265490e0
- SHA1
  
  66bb81d725a0bb83a1c7a6f306655ab0b9c9c26f
- SHA256
  
  47d9c4ca6c7d3a7412f22e0806b373e4982fbc33fecd95e1630c9beff6c8915b
- SHA512
  
  73a24d238063e5aa5bb8782e68a8dfd3a8448647ab721e4fb2c98d445109278aebdc6e95206dc58ea550cba7306c268b90a6041dfe1d0f499dd223c8ec98da6c
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HyCyh7vtRJ4BqKb1cKtqPd:vCjsIOtEvwDpj5Hv0D
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2