63d16f52075561a7aedf138ec59bbc9b90a7edcea3ef74f40465a105f0ae9012 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.54b9725dfd07e6991d247abc97b02ec0.exe
Size

61KB
Sample

231028-ymk5bahd49
MD5

54b9725dfd07e6991d247abc97b02ec0
SHA1

f109afaa41ec00fdad5256e967243d6f105d3254
SHA256

63d16f52075561a7aedf138ec59bbc9b90a7edcea3ef74f40465a105f0ae9012
SHA512

9658257a86802dd4c273101c364e0dec583531494006ac97707f89bf95cf7c296d00ac39be5f81a2a2960df2128313ed24e9058bb2889934f4f95b5dc0ebd7b3
SSDEEP

384:+5rDuuOFpEauMLfQDb2pproT/z4o1GJE6Al6zVyXeTLhrqNNNNLwwwwgn777REEP:MDcpEBMLfQcubtGE96ByXeTLdDEEEc

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  NEAS.54b9725dfd07e6991d247abc97b02ec0.exe
- Size
  
  61KB
- MD5
  
  54b9725dfd07e6991d247abc97b02ec0
- SHA1
  
  f109afaa41ec00fdad5256e967243d6f105d3254
- SHA256
  
  63d16f52075561a7aedf138ec59bbc9b90a7edcea3ef74f40465a105f0ae9012
- SHA512
  
  9658257a86802dd4c273101c364e0dec583531494006ac97707f89bf95cf7c296d00ac39be5f81a2a2960df2128313ed24e9058bb2889934f4f95b5dc0ebd7b3
- SSDEEP
  
  384:+5rDuuOFpEauMLfQDb2pproT/z4o1GJE6Al6zVyXeTLhrqNNNNLwwwwgn777REEP:MDcpEBMLfQcubtGE96ByXeTLdDEEEc
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2