515b682325a1086bda65172f04824ed9ee1fe2a0c25d60e0e2591a199a9db9cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4b3b89ea42704213023a03d570d6cdd0.exe
Size

4.5MB
Sample

231105-1w26asdc6z
MD5

4b3b89ea42704213023a03d570d6cdd0
SHA1

42f9e889e4555bb4056f35aa6938dfa96a2a3550
SHA256

515b682325a1086bda65172f04824ed9ee1fe2a0c25d60e0e2591a199a9db9cc
SHA512

5fbace55422b4c4e8795f58477eeb95a29152498a255cae1bb71ffa9b4a981b57a3ef6e6f4e69e6fc88f1127d57b14aefcbdc5ba6d2cccdf050ee213e132241e
SSDEEP

98304:wDwne7WV330L6jKFElm5YJMnnsGWO/T4O8tNub+fxRHqpI5l3Sh:wghNw0gjY0nsXOqtNrfxRHqpI5VSh

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.4b3b89ea42704213023a03d570d6cdd0.exe
- Size
  
  4.5MB
- MD5
  
  4b3b89ea42704213023a03d570d6cdd0
- SHA1
  
  42f9e889e4555bb4056f35aa6938dfa96a2a3550
- SHA256
  
  515b682325a1086bda65172f04824ed9ee1fe2a0c25d60e0e2591a199a9db9cc
- SHA512
  
  5fbace55422b4c4e8795f58477eeb95a29152498a255cae1bb71ffa9b4a981b57a3ef6e6f4e69e6fc88f1127d57b14aefcbdc5ba6d2cccdf050ee213e132241e
- SSDEEP
  
  98304:wDwne7WV330L6jKFElm5YJMnnsGWO/T4O8tNub+fxRHqpI5l3Sh:wghNw0gjY0nsXOqtNrfxRHqpI5VSh
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2