b04a996de643f390d97977f63a83357e053cee6d2192f7a71c65481c3f3a769d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3a8090899ed222aa59eb1e1c8dfaa40_exe32.exe
Size

519KB
Sample

231015-yet29afd45
MD5

a3a8090899ed222aa59eb1e1c8dfaa40
SHA1

f258183c91a71cdc80110ff631674bd698a952cd
SHA256

b04a996de643f390d97977f63a83357e053cee6d2192f7a71c65481c3f3a769d
SHA512

f8c7da3b2af4ec5c8c3a46ac4a4401337a41924807e65218b5a62e106d7262cd703e8b9d9522b02908759ef9db892a0bc4a3a826a0d855760b95e0a0648ab845
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxy:dqDAwl0xPTMiR9JSSxPUKYGdodHh

Score

7^/10

Malware Config

Targets

- Target
  
  a3a8090899ed222aa59eb1e1c8dfaa40_exe32.exe
- Size
  
  519KB
- MD5
  
  a3a8090899ed222aa59eb1e1c8dfaa40
- SHA1
  
  f258183c91a71cdc80110ff631674bd698a952cd
- SHA256
  
  b04a996de643f390d97977f63a83357e053cee6d2192f7a71c65481c3f3a769d
- SHA512
  
  f8c7da3b2af4ec5c8c3a46ac4a4401337a41924807e65218b5a62e106d7262cd703e8b9d9522b02908759ef9db892a0bc4a3a826a0d855760b95e0a0648ab845
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxy:dqDAwl0xPTMiR9JSSxPUKYGdodHh
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2