d47ea3c6ce2cafcff7434f5179d2f6100d1b1e1790f492abe73e9bf6d2e47e42 | Triage

Sharing

General

Target

NEAS.d4aab7bbe8b9d18ec3da51b3c2d9bf00.exe
Size

21KB
Sample

231101-rny91agc3z
MD5

d4aab7bbe8b9d18ec3da51b3c2d9bf00
SHA1

fbd8f48932abf93c5a1ffaccb4e4bcad4c136d7e
SHA256

d47ea3c6ce2cafcff7434f5179d2f6100d1b1e1790f492abe73e9bf6d2e47e42
SHA512

0e908897ad460018b96cf668af5aba5ad6d5e84624eab100b264f7cc3c140bf4dd91f3693bb08fda15f256ad78c18a7355aff345c9de0fb97865209debdc4560
SSDEEP

192:Q54euZSchV1Efj9HjU4uMIKOFkJHwDFIp8zaubYpmc8RhCfL8TsGCc0Spxhw7nmS:I4eyhV+fxqtWiXYpgG5lFqw4gj5Z

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.d4aab7bbe8b9d18ec3da51b3c2d9bf00.exe
- Size
  
  21KB
- MD5
  
  d4aab7bbe8b9d18ec3da51b3c2d9bf00
- SHA1
  
  fbd8f48932abf93c5a1ffaccb4e4bcad4c136d7e
- SHA256
  
  d47ea3c6ce2cafcff7434f5179d2f6100d1b1e1790f492abe73e9bf6d2e47e42
- SHA512
  
  0e908897ad460018b96cf668af5aba5ad6d5e84624eab100b264f7cc3c140bf4dd91f3693bb08fda15f256ad78c18a7355aff345c9de0fb97865209debdc4560
- SSDEEP
  
  192:Q54euZSchV1Efj9HjU4uMIKOFkJHwDFIp8zaubYpmc8RhCfL8TsGCc0Spxhw7nmS:I4eyhV+fxqtWiXYpgG5lFqw4gj5Z
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2