2b503f1c2fa9bc1f20b5e033d1bce83512f8d061671effe506e995cb8fc155dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.10587f1e2a65083ec70c9a6ba5cbd720.exe
Size

27KB
Sample

231106-12pgdshc82
MD5

10587f1e2a65083ec70c9a6ba5cbd720
SHA1

71b54d2d76a379b77b8c26b12905ebc5acb123b0
SHA256

2b503f1c2fa9bc1f20b5e033d1bce83512f8d061671effe506e995cb8fc155dd
SHA512

a68fa3a05cf6db2a5fbd7a35bebebad9fcaae258e16664fb514332c39216837dfb2921aafc558db5cd79a3f11bbeab2f7c2f5587807a94727e3d8e28f1ca51c6
SSDEEP

192:jn9FwXnwR2bsfunHMnHFb1emUAFoP7u1Y:zOnwR2tHMnHFAmhyqY

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.10587f1e2a65083ec70c9a6ba5cbd720.exe
- Size
  
  27KB
- MD5
  
  10587f1e2a65083ec70c9a6ba5cbd720
- SHA1
  
  71b54d2d76a379b77b8c26b12905ebc5acb123b0
- SHA256
  
  2b503f1c2fa9bc1f20b5e033d1bce83512f8d061671effe506e995cb8fc155dd
- SHA512
  
  a68fa3a05cf6db2a5fbd7a35bebebad9fcaae258e16664fb514332c39216837dfb2921aafc558db5cd79a3f11bbeab2f7c2f5587807a94727e3d8e28f1ca51c6
- SSDEEP
  
  192:jn9FwXnwR2bsfunHMnHFb1emUAFoP7u1Y:zOnwR2tHMnHFAmhyqY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2