85f5c275af63378eff5f06a5d4e6a6425d4982b21e2e07ff9c60c1f12aba2ec3 | Triage

Sharing

General

Target

NEAS.1a242f3b52a1b560d26406ccdca8cbf0.exe
Size

28KB
Sample

231102-t6zplaff2x
MD5

1a242f3b52a1b560d26406ccdca8cbf0
SHA1

54aea37c812ac79e093835ed664647da6e66662d
SHA256

85f5c275af63378eff5f06a5d4e6a6425d4982b21e2e07ff9c60c1f12aba2ec3
SHA512

db59b0688e314a2079e3ee41cfed7401d40d58b19620f806be34c5c1d393835d660e87be30a82175d0f920c4ee752e9b715782f246928a9f0a15d8ac2c8d8857
SSDEEP

384:Lzz3qWcd5DUVQQZM+JKcCNwU1Mf9Yl4ynIs3HuOXhjoh97pQmHlS6y:nz3qWc7RY1JgNwmZlj3OOVor7pxTy

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.1a242f3b52a1b560d26406ccdca8cbf0.exe
- Size
  
  28KB
- MD5
  
  1a242f3b52a1b560d26406ccdca8cbf0
- SHA1
  
  54aea37c812ac79e093835ed664647da6e66662d
- SHA256
  
  85f5c275af63378eff5f06a5d4e6a6425d4982b21e2e07ff9c60c1f12aba2ec3
- SHA512
  
  db59b0688e314a2079e3ee41cfed7401d40d58b19620f806be34c5c1d393835d660e87be30a82175d0f920c4ee752e9b715782f246928a9f0a15d8ac2c8d8857
- SSDEEP
  
  384:Lzz3qWcd5DUVQQZM+JKcCNwU1Mf9Yl4ynIs3HuOXhjoh97pQmHlS6y:nz3qWc7RY1JgNwmZlj3OOVor7pxTy
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2