ea5e5a5dfb05eda1d98e196933bfdaf02908e0a9884091f582aa562be08f988e | Triage

Sharing

General

Target

f5eb64ec71d71507f8f3a2036e471860_exe32.exe
Size

516KB
Sample

231015-ykh7yaag73
MD5

f5eb64ec71d71507f8f3a2036e471860
SHA1

2d2795bea2fdea28c15d06297fbea83693ead604
SHA256

ea5e5a5dfb05eda1d98e196933bfdaf02908e0a9884091f582aa562be08f988e
SHA512

75f84618a0016c6142b130ed8823f9100dcad67b21f2addb5d9b8f83569925702437f8ca01a97511d6e1f2dbe1f844fa0e2efcab0e4a00471f249114b260c1ee
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxk:dqDAwl0xPTMiR9JSSxPUKYGdodH/

Score

7^/10

Malware Config

Targets

- Target
  
  f5eb64ec71d71507f8f3a2036e471860_exe32.exe
- Size
  
  516KB
- MD5
  
  f5eb64ec71d71507f8f3a2036e471860
- SHA1
  
  2d2795bea2fdea28c15d06297fbea83693ead604
- SHA256
  
  ea5e5a5dfb05eda1d98e196933bfdaf02908e0a9884091f582aa562be08f988e
- SHA512
  
  75f84618a0016c6142b130ed8823f9100dcad67b21f2addb5d9b8f83569925702437f8ca01a97511d6e1f2dbe1f844fa0e2efcab0e4a00471f249114b260c1ee
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxk:dqDAwl0xPTMiR9JSSxPUKYGdodH/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2