115d7361559c9d196caff255697f5ff10353c372178151ac8314694c0d197ce7 | Triage

Sharing

General

Target

NEAS.e4dd20eb391727cbd02787ec80d9ba40.exe
Size

516KB
Sample

231101-rpzxxsgh5z
MD5

e4dd20eb391727cbd02787ec80d9ba40
SHA1

bcb693409fb7569ff601fe786e53738677ae91c0
SHA256

115d7361559c9d196caff255697f5ff10353c372178151ac8314694c0d197ce7
SHA512

df1d71577405c8426d0efe2ac7f71dd50611e765101fa2454bd38a165e7b774d8c3ea0052a95973660e73cf36df724bdb0910661cafa45b5c5f5ac3d9546fb86
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxC:dqDAwl0xPTMiR9JSSxPUKYGdodHd

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.e4dd20eb391727cbd02787ec80d9ba40.exe
- Size
  
  516KB
- MD5
  
  e4dd20eb391727cbd02787ec80d9ba40
- SHA1
  
  bcb693409fb7569ff601fe786e53738677ae91c0
- SHA256
  
  115d7361559c9d196caff255697f5ff10353c372178151ac8314694c0d197ce7
- SHA512
  
  df1d71577405c8426d0efe2ac7f71dd50611e765101fa2454bd38a165e7b774d8c3ea0052a95973660e73cf36df724bdb0910661cafa45b5c5f5ac3d9546fb86
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxC:dqDAwl0xPTMiR9JSSxPUKYGdodHd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2