e2640cf83f2674a0492ed0d41261ffedc485e5548fb53d398e41b3ba6a8de9bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e26e6b320c99770821aafa1dbd625210.exe
Size

40KB
Sample

231014-xztrjsbg44
MD5

e26e6b320c99770821aafa1dbd625210
SHA1

b6f007e32ec50e606be4536a901cad83462cec2f
SHA256

e2640cf83f2674a0492ed0d41261ffedc485e5548fb53d398e41b3ba6a8de9bf
SHA512

38ceabe2df4d452fa9942cdd0e11f433df0aa9c0800d9a6168b28492ea48399251243fceeec79718dc0c9662c8225d3898527b73545b9ac0b498a58b14f82096
SSDEEP

768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkeyJ:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+w

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.e26e6b320c99770821aafa1dbd625210.exe
- Size
  
  40KB
- MD5
  
  e26e6b320c99770821aafa1dbd625210
- SHA1
  
  b6f007e32ec50e606be4536a901cad83462cec2f
- SHA256
  
  e2640cf83f2674a0492ed0d41261ffedc485e5548fb53d398e41b3ba6a8de9bf
- SHA512
  
  38ceabe2df4d452fa9942cdd0e11f433df0aa9c0800d9a6168b28492ea48399251243fceeec79718dc0c9662c8225d3898527b73545b9ac0b498a58b14f82096
- SSDEEP
  
  768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkeyJ:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+w
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2