ea478d9b06c3b33b009e7ea36e5d437837833944993aa4e71d794376bf12d5fd | Triage

Sharing

General

Target

b19e3c2a84adc5cb0e8246430cd289fa.exe
Size

2.7MB
Sample

230831-g5224sdb7t
MD5

b19e3c2a84adc5cb0e8246430cd289fa
SHA1

b0736c9c4dc2d1013f3794a604efa965b1cd0cb4
SHA256

ea478d9b06c3b33b009e7ea36e5d437837833944993aa4e71d794376bf12d5fd
SHA512

20cacd684b73d64ec36b9fe1ca6d197c374ab832d079d7756b50f6ef11dba0348bcd6088e2c987dc89f689e1919a4942848d0b3936898c715bbcd8da25438e29
SSDEEP

49152:mDkUrjrxRvdRVQioFIG5Ethdc2tg9eLJshFttFRMHWJDyxgTF1:m4UT4FRuUss/t1iQ

Score

7^/10

Malware Config

Targets

- Target
  
  b19e3c2a84adc5cb0e8246430cd289fa.exe
- Size
  
  2.7MB
- MD5
  
  b19e3c2a84adc5cb0e8246430cd289fa
- SHA1
  
  b0736c9c4dc2d1013f3794a604efa965b1cd0cb4
- SHA256
  
  ea478d9b06c3b33b009e7ea36e5d437837833944993aa4e71d794376bf12d5fd
- SHA512
  
  20cacd684b73d64ec36b9fe1ca6d197c374ab832d079d7756b50f6ef11dba0348bcd6088e2c987dc89f689e1919a4942848d0b3936898c715bbcd8da25438e29
- SSDEEP
  
  49152:mDkUrjrxRvdRVQioFIG5Ethdc2tg9eLJshFttFRMHWJDyxgTF1:m4UT4FRuUss/t1iQ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2