ee771e4758567e38bb34fd4daa12b5d6b81b0dade627f5eff8a9421951c788e3 | Triage

Sharing

General

Target

NEAS.72783d6933b7de3cf2d3fdf550be47c0.exe
Size

93KB
Sample

231031-kvcw1sef34
MD5

72783d6933b7de3cf2d3fdf550be47c0
SHA1

cf1690b513d3aeeb6681331197bca20704248f6e
SHA256

ee771e4758567e38bb34fd4daa12b5d6b81b0dade627f5eff8a9421951c788e3
SHA512

c26610eece5c35d1ff8ebf2d1afd2f87a4415b2dec9f15af1dd439a2ee4a48fd90e286e516ebdecdc72573779b5e8496f87b8cb562c3e11a6eabec56b6ad2127
SSDEEP

1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7ed:PfU/WF6QMauSuiWNi9CO+WARJrWNZ8d

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.72783d6933b7de3cf2d3fdf550be47c0.exe
- Size
  
  93KB
- MD5
  
  72783d6933b7de3cf2d3fdf550be47c0
- SHA1
  
  cf1690b513d3aeeb6681331197bca20704248f6e
- SHA256
  
  ee771e4758567e38bb34fd4daa12b5d6b81b0dade627f5eff8a9421951c788e3
- SHA512
  
  c26610eece5c35d1ff8ebf2d1afd2f87a4415b2dec9f15af1dd439a2ee4a48fd90e286e516ebdecdc72573779b5e8496f87b8cb562c3e11a6eabec56b6ad2127
- SSDEEP
  
  1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7ed:PfU/WF6QMauSuiWNi9CO+WARJrWNZ8d
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2