ed4d7c29f32bee25b2fc730ca6d7dd3a796313c0f982fc7fab88d63a304a3e65 | Triage

Sharing

General

Target

NEAS.e666f1aead00688672d4ff4cfe52ac10.exe
Size

313KB
Sample

231014-j8p8tsbe49
MD5

e666f1aead00688672d4ff4cfe52ac10
SHA1

b050460cc6c3a24511babb57caff8fa844151254
SHA256

ed4d7c29f32bee25b2fc730ca6d7dd3a796313c0f982fc7fab88d63a304a3e65
SHA512

5807cfd39f2a87d624fd41802e08ac2bc6a2f43efcf48bc183d8ee66bff7d9474d26b98238c14f95bc41b91a6a5885b5f5436ec42f797f72353b5b17311bca58
SSDEEP

3072:1YUb5QoJ4g+zp0iBtTy06ZjKIz1ZdW4SrOLVSVpP6ehvcKVTu:1Yk+tT+hKSZI4zLVSVpPzjA

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.e666f1aead00688672d4ff4cfe52ac10.exe
- Size
  
  313KB
- MD5
  
  e666f1aead00688672d4ff4cfe52ac10
- SHA1
  
  b050460cc6c3a24511babb57caff8fa844151254
- SHA256
  
  ed4d7c29f32bee25b2fc730ca6d7dd3a796313c0f982fc7fab88d63a304a3e65
- SHA512
  
  5807cfd39f2a87d624fd41802e08ac2bc6a2f43efcf48bc183d8ee66bff7d9474d26b98238c14f95bc41b91a6a5885b5f5436ec42f797f72353b5b17311bca58
- SSDEEP
  
  3072:1YUb5QoJ4g+zp0iBtTy06ZjKIz1ZdW4SrOLVSVpP6ehvcKVTu:1Yk+tT+hKSZI4zLVSVpPzjA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2