a27a7a5dd7f57c9a022a3c4f6407261975e681592de6c37d1bfa8a714b6eb8ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de8a1696740a6a5025f54ca41bc82af0_exe32.exe
Size

620KB
Sample

231015-yh9bcahg53
MD5

de8a1696740a6a5025f54ca41bc82af0
SHA1

e90f60ef64c1de4b2c0d8929fac12bcffc6f5fc8
SHA256

a27a7a5dd7f57c9a022a3c4f6407261975e681592de6c37d1bfa8a714b6eb8ec
SHA512

713a65ce64a4661fb9e25cca37363f54a8c2d94019c1e9ed7b3181d5944f183aa05aa772ecde605b86662c6fcb1f1f7d35b672e4766986ac70c0cca05447f4f1
SSDEEP

6144:dqDAwl0xPTMiR9JSSxPUKYGdodH2USiZTK40m:d+67XR9JSSxvYGdodH2UvRK41

Score

7^/10

Malware Config

Targets

- Target
  
  de8a1696740a6a5025f54ca41bc82af0_exe32.exe
- Size
  
  620KB
- MD5
  
  de8a1696740a6a5025f54ca41bc82af0
- SHA1
  
  e90f60ef64c1de4b2c0d8929fac12bcffc6f5fc8
- SHA256
  
  a27a7a5dd7f57c9a022a3c4f6407261975e681592de6c37d1bfa8a714b6eb8ec
- SHA512
  
  713a65ce64a4661fb9e25cca37363f54a8c2d94019c1e9ed7b3181d5944f183aa05aa772ecde605b86662c6fcb1f1f7d35b672e4766986ac70c0cca05447f4f1
- SSDEEP
  
  6144:dqDAwl0xPTMiR9JSSxPUKYGdodH2USiZTK40m:d+67XR9JSSxvYGdodH2UvRK41
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2