5ea4c58231e73cee31f715d9235a5157ccc899b2ea40fcd2133631be6d629157 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0120242bc3f1e7eacb88560f1adb2530.exe
Size

36KB
Sample

231104-pdvsqahf4w
MD5

0120242bc3f1e7eacb88560f1adb2530
SHA1

589fde9ae8ebee3b7f55267e20b5f9a563d543bf
SHA256

5ea4c58231e73cee31f715d9235a5157ccc899b2ea40fcd2133631be6d629157
SHA512

de66b51dc541b07d869eb65c7f86cf44345d5f202f301a2a71b8f9108d0a7c6a0e1bf1ed8dca0be63eed4df371700df9429590a2fee29e220ced1f112025e0ef
SSDEEP

384:VohfAyIQtVz9kK3l6VNHIzKzeZ3/D+DpoxHJg96V8XKe09O87HnyASW6PKTe70:mhL/bMVNH+TZ3/D+DfRKe09O8HLSPP

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.0120242bc3f1e7eacb88560f1adb2530.exe
- Size
  
  36KB
- MD5
  
  0120242bc3f1e7eacb88560f1adb2530
- SHA1
  
  589fde9ae8ebee3b7f55267e20b5f9a563d543bf
- SHA256
  
  5ea4c58231e73cee31f715d9235a5157ccc899b2ea40fcd2133631be6d629157
- SHA512
  
  de66b51dc541b07d869eb65c7f86cf44345d5f202f301a2a71b8f9108d0a7c6a0e1bf1ed8dca0be63eed4df371700df9429590a2fee29e220ced1f112025e0ef
- SSDEEP
  
  384:VohfAyIQtVz9kK3l6VNHIzKzeZ3/D+DpoxHJg96V8XKe09O87HnyASW6PKTe70:mhL/bMVNH+TZ3/D+DfRKe09O8HLSPP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2