7c75520394d058d7cca4fc3d2ab6929f29d1dc0b2636a807865bd9d709037a71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a964b94917890ebd8c04342be5e79640.exe
Size

6KB
Sample

231014-wrkm8sga96
MD5

a964b94917890ebd8c04342be5e79640
SHA1

0ee6b226990a7f339a2b41bd4eacee157686854a
SHA256

7c75520394d058d7cca4fc3d2ab6929f29d1dc0b2636a807865bd9d709037a71
SHA512

6e1798681e66e9fc63e94d33c9747622b301b260afab5fc70f8043125456a89191aa74f84fc51118e2199d542ac86f515982d41a2a1f607d829abe528d81fa04
SSDEEP

96:ZWgn/x6z0AjDXX6Hb3RngnKymV44Abg0DnjofL4Ch20bB1rA1bolYqz8DO2P+:Yi5qDXX6dngnKfzeMfd7V1rA1Meqz8Y

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.a964b94917890ebd8c04342be5e79640.exe
- Size
  
  6KB
- MD5
  
  a964b94917890ebd8c04342be5e79640
- SHA1
  
  0ee6b226990a7f339a2b41bd4eacee157686854a
- SHA256
  
  7c75520394d058d7cca4fc3d2ab6929f29d1dc0b2636a807865bd9d709037a71
- SHA512
  
  6e1798681e66e9fc63e94d33c9747622b301b260afab5fc70f8043125456a89191aa74f84fc51118e2199d542ac86f515982d41a2a1f607d829abe528d81fa04
- SSDEEP
  
  96:ZWgn/x6z0AjDXX6Hb3RngnKymV44Abg0DnjofL4Ch20bB1rA1bolYqz8DO2P+:Yi5qDXX6dngnKfzeMfd7V1rA1Meqz8Y
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2