a56e66b3f1ec0b84d9cee900373e564bf07769cab43d48f0ba65202433e349d6 | Triage

Sharing

General

Target

NEAS.76b0232aed442ab6c62a063a89059070.exe
Size

31KB
Sample

231014-wky72sdh48
MD5

76b0232aed442ab6c62a063a89059070
SHA1

855d51e744852f1b5c521af70fe671d611bee61a
SHA256

a56e66b3f1ec0b84d9cee900373e564bf07769cab43d48f0ba65202433e349d6
SHA512

fafac9e2cb16d71993b69153c704cbb4452c26c534e84e545694fbc78bdd7e98c9b26c2de415106515754aa9e0117c6704081ff21b4e2cb6d272ea15946a08b7
SSDEEP

384:cJK3FwyHsmev9n96oTlzcFihsHReNWpgVQYAUYVOBDmP7lOmqL8R:qK3psxrJzcFiAgWSrA7oBD07lfR

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.76b0232aed442ab6c62a063a89059070.exe
- Size
  
  31KB
- MD5
  
  76b0232aed442ab6c62a063a89059070
- SHA1
  
  855d51e744852f1b5c521af70fe671d611bee61a
- SHA256
  
  a56e66b3f1ec0b84d9cee900373e564bf07769cab43d48f0ba65202433e349d6
- SHA512
  
  fafac9e2cb16d71993b69153c704cbb4452c26c534e84e545694fbc78bdd7e98c9b26c2de415106515754aa9e0117c6704081ff21b4e2cb6d272ea15946a08b7
- SSDEEP
  
  384:cJK3FwyHsmev9n96oTlzcFihsHReNWpgVQYAUYVOBDmP7lOmqL8R:qK3psxrJzcFiAgWSrA7oBD07lfR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2