68eca685ad422b94edd579ad4b25f1ffd8db2b032c67eff079bc7bf83ac1dcd3 | Triage

Sharing

General

Target

NEAS.28b60f04cf1dfeb83a971d93eaf4d220.exe
Size

242KB
Sample

231013-ysv7gahd95
MD5

28b60f04cf1dfeb83a971d93eaf4d220
SHA1

e040212642936269c0efa5c578ae2b20263a86e3
SHA256

68eca685ad422b94edd579ad4b25f1ffd8db2b032c67eff079bc7bf83ac1dcd3
SHA512

54f66410d62d7b236c075711364f7f5cb49711c3c541bcff586034845f5875ec20a856fd3e976067570836f50c45e730f53c25b1a8723e3712871215280c2d0f
SSDEEP

3072:7dk+xagnPm/P1A4xVzHon5dRZNwPjN+Y7:Dxah9RHOly

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.28b60f04cf1dfeb83a971d93eaf4d220.exe
- Size
  
  242KB
- MD5
  
  28b60f04cf1dfeb83a971d93eaf4d220
- SHA1
  
  e040212642936269c0efa5c578ae2b20263a86e3
- SHA256
  
  68eca685ad422b94edd579ad4b25f1ffd8db2b032c67eff079bc7bf83ac1dcd3
- SHA512
  
  54f66410d62d7b236c075711364f7f5cb49711c3c541bcff586034845f5875ec20a856fd3e976067570836f50c45e730f53c25b1a8723e3712871215280c2d0f
- SSDEEP
  
  3072:7dk+xagnPm/P1A4xVzHon5dRZNwPjN+Y7:Dxah9RHOly
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2