4943fb8b4d85a574c8715480e4ef7ab3c5656dd4ec5b7f72e134aec048ac8676 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3dda98015fbe8exeexeexeex.exe
Size

83KB
Sample

230710-v21a1add5s
MD5

d3dda98015fbe8306ecbf283e018fd00
SHA1

eff8a6ecdd49b18b563e163310c3ec9dec2dfe3c
SHA256

4943fb8b4d85a574c8715480e4ef7ab3c5656dd4ec5b7f72e134aec048ac8676
SHA512

1ad0fe1f335e274235536c0d08f7862c7f5836e325a99708caa82670b39922e1c1ce62078cfd34a7796c16a3ecbf1720d33b340900b8b7ddb046d240b7761230
SSDEEP

768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnzvNG1c:ZzFbxmLPWQMOtEvwDpj386Sj/RsxQzI

Score

7^/10

Malware Config

Targets

- Target
  
  d3dda98015fbe8exeexeexeex.exe
- Size
  
  83KB
- MD5
  
  d3dda98015fbe8306ecbf283e018fd00
- SHA1
  
  eff8a6ecdd49b18b563e163310c3ec9dec2dfe3c
- SHA256
  
  4943fb8b4d85a574c8715480e4ef7ab3c5656dd4ec5b7f72e134aec048ac8676
- SHA512
  
  1ad0fe1f335e274235536c0d08f7862c7f5836e325a99708caa82670b39922e1c1ce62078cfd34a7796c16a3ecbf1720d33b340900b8b7ddb046d240b7761230
- SSDEEP
  
  768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/RvDQeduJHqqnzvNG1c:ZzFbxmLPWQMOtEvwDpj386Sj/RsxQzI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2