1e9595a0662d184ced635e2d88b2d952175010d0b3bd1232efafe4d754eb2da4 | Triage

Sharing

General

Target

NEAS.f5aafa02d6a8b9f2cafe2e38714241f0.exe
Size

37KB
Sample

231031-3yg91shg75
MD5

f5aafa02d6a8b9f2cafe2e38714241f0
SHA1

4da9cab27ff9d08a31f03df9417c3c9eec9ca9df
SHA256

1e9595a0662d184ced635e2d88b2d952175010d0b3bd1232efafe4d754eb2da4
SHA512

99254e08f14fd870b89514c66fe7b8dd68a791ac67e8fd9c8a7f4fa5e896332d88c18d2f483345acb47a34bd3fda1dfbdc5cccd4f692bbc2c5da1e386d302537
SSDEEP

768:7qP0V5P1wD0CbS0HaUpJVuq9Jzo78x+pu9fWWq53E7l0nX:720V7wdS0P79Jc78x+pu9fWWq539

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.f5aafa02d6a8b9f2cafe2e38714241f0.exe
- Size
  
  37KB
- MD5
  
  f5aafa02d6a8b9f2cafe2e38714241f0
- SHA1
  
  4da9cab27ff9d08a31f03df9417c3c9eec9ca9df
- SHA256
  
  1e9595a0662d184ced635e2d88b2d952175010d0b3bd1232efafe4d754eb2da4
- SHA512
  
  99254e08f14fd870b89514c66fe7b8dd68a791ac67e8fd9c8a7f4fa5e896332d88c18d2f483345acb47a34bd3fda1dfbdc5cccd4f692bbc2c5da1e386d302537
- SSDEEP
  
  768:7qP0V5P1wD0CbS0HaUpJVuq9Jzo78x+pu9fWWq53E7l0nX:720V7wdS0P79Jc78x+pu9fWWq539
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2