c9d9cc915602fcf5540710df9b2a6fd121c3fe9f7e1bb1844408a521064121d1 | Triage

Sharing

General

Target

NEAS.e8681c98634ee71cd6c416ad31192830.exe
Size

32KB
Sample

231014-j8xmxabf54
MD5

e8681c98634ee71cd6c416ad31192830
SHA1

4813a38150e799b126730458e55c8f3e9cc5ae8c
SHA256

c9d9cc915602fcf5540710df9b2a6fd121c3fe9f7e1bb1844408a521064121d1
SHA512

6a10b0524d59b47604299779db9777b01d6f5ab743d02d46918ba842f4a6951a23de7602ac9e33b46a30359e682b67e55b052a65eee76a28c237004b6faee828
SSDEEP

384:fY/7iMmQgVC+02JWuCSPmSQTebw/UqFPpF5bGwpRm7mLZe4NRU:y12JTPRQTeZq1bLcWRU

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.e8681c98634ee71cd6c416ad31192830.exe
- Size
  
  32KB
- MD5
  
  e8681c98634ee71cd6c416ad31192830
- SHA1
  
  4813a38150e799b126730458e55c8f3e9cc5ae8c
- SHA256
  
  c9d9cc915602fcf5540710df9b2a6fd121c3fe9f7e1bb1844408a521064121d1
- SHA512
  
  6a10b0524d59b47604299779db9777b01d6f5ab743d02d46918ba842f4a6951a23de7602ac9e33b46a30359e682b67e55b052a65eee76a28c237004b6faee828
- SSDEEP
  
  384:fY/7iMmQgVC+02JWuCSPmSQTebw/UqFPpF5bGwpRm7mLZe4NRU:y12JTPRQTeZq1bLcWRU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2