6b32365c9b2534a42c4894aee7a236752652811b4383e343ec6941bb6b1b731b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

febf081efa732e378f72db0b75982620_exe32.exe
Size

27KB
Sample

231015-yk2dhsbb75
MD5

febf081efa732e378f72db0b75982620
SHA1

3ff85877fc8945ed363f3d3f02a6cce0f046be70
SHA256

6b32365c9b2534a42c4894aee7a236752652811b4383e343ec6941bb6b1b731b
SHA512

54cbf3f7cc69b48a390578b96d69b311401a78ed556d5893a7292f4a1d4822105d63948af1bbb4ef9c37a435cc1304796f8d40ca4a753b98c9f4da195344b5d4
SSDEEP

384:AvpohLpCKcYIs4GggGXlXdvwY7xMR5WYKZseH5k3N/NfK:hCUJgRXlNvwkQFKVSHK

Score

7^/10

Malware Config

Targets

- Target
  
  febf081efa732e378f72db0b75982620_exe32.exe
- Size
  
  27KB
- MD5
  
  febf081efa732e378f72db0b75982620
- SHA1
  
  3ff85877fc8945ed363f3d3f02a6cce0f046be70
- SHA256
  
  6b32365c9b2534a42c4894aee7a236752652811b4383e343ec6941bb6b1b731b
- SHA512
  
  54cbf3f7cc69b48a390578b96d69b311401a78ed556d5893a7292f4a1d4822105d63948af1bbb4ef9c37a435cc1304796f8d40ca4a753b98c9f4da195344b5d4
- SSDEEP
  
  384:AvpohLpCKcYIs4GggGXlXdvwY7xMR5WYKZseH5k3N/NfK:hCUJgRXlNvwkQFKVSHK
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2