2b7e287c09c21d2c70cfa81a3c52b47e66bacfbb3c14649bfe58adec9d57b4f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9fe948708934de208b6d0c6b22b56b80.exe
Size

93KB
Sample

231102-jqnbhsbb34
MD5

9fe948708934de208b6d0c6b22b56b80
SHA1

7be6e30ff1dfebfc77ac3d2bbba929a9fb82de52
SHA256

2b7e287c09c21d2c70cfa81a3c52b47e66bacfbb3c14649bfe58adec9d57b4f3
SHA512

d7ad2f36e87a8e1f8cab3acdf87dfa5c555fd78c034eacd2bfc6e94cbf240a9d53c66da5e3a945f609bc6ce6e6a81b4f1cbdb097e583ce3f7bef19e864c5d658
SSDEEP

1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcU5:EfMNE1JG6XMk27EbpOthl0ZUed0U5

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.9fe948708934de208b6d0c6b22b56b80.exe
- Size
  
  93KB
- MD5
  
  9fe948708934de208b6d0c6b22b56b80
- SHA1
  
  7be6e30ff1dfebfc77ac3d2bbba929a9fb82de52
- SHA256
  
  2b7e287c09c21d2c70cfa81a3c52b47e66bacfbb3c14649bfe58adec9d57b4f3
- SHA512
  
  d7ad2f36e87a8e1f8cab3acdf87dfa5c555fd78c034eacd2bfc6e94cbf240a9d53c66da5e3a945f609bc6ce6e6a81b4f1cbdb097e583ce3f7bef19e864c5d658
- SSDEEP
  
  1536:GzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcU5:EfMNE1JG6XMk27EbpOthl0ZUed0U5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2