6ab4a1bb849074b3e39532905ced0b21bf718fa7bc1e8f07bfeabf9c24d41eae | Triage

Sharing

General

Target

NEAS.ac76071fb73cccfa191f8ab6de2091d0.exe
Size

549KB
Sample

231103-nzhvlshg2v
MD5

ac76071fb73cccfa191f8ab6de2091d0
SHA1

0c776e4eb306d016ede70c7ec1a0523d9111150b
SHA256

6ab4a1bb849074b3e39532905ced0b21bf718fa7bc1e8f07bfeabf9c24d41eae
SHA512

2ce6a343f14871776cea499645d434768d500ee583a6df01ba448c7f33f58b831434b53598412f912667c087ee36340a2a8476ec6f612e33114207d0f4f0f3b0
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxE:dqDAwl0xPTMiR9JSSxPUKYGdodHP

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.ac76071fb73cccfa191f8ab6de2091d0.exe
- Size
  
  549KB
- MD5
  
  ac76071fb73cccfa191f8ab6de2091d0
- SHA1
  
  0c776e4eb306d016ede70c7ec1a0523d9111150b
- SHA256
  
  6ab4a1bb849074b3e39532905ced0b21bf718fa7bc1e8f07bfeabf9c24d41eae
- SHA512
  
  2ce6a343f14871776cea499645d434768d500ee583a6df01ba448c7f33f58b831434b53598412f912667c087ee36340a2a8476ec6f612e33114207d0f4f0f3b0
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxE:dqDAwl0xPTMiR9JSSxPUKYGdodHP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2