6697b0aefaf8902f2449f66a7bcee61eba3108a73dfc1f58fe4e2f96bd6c8b4e | Triage

Sharing

General

Target

NEAS.9c5764580f69d346803e96bdaa768c40.exe
Size

31KB
Sample

231106-yasnmafc36
MD5

9c5764580f69d346803e96bdaa768c40
SHA1

300ab43c5269562b60adf73b00c1f80e0a9b6fcc
SHA256

6697b0aefaf8902f2449f66a7bcee61eba3108a73dfc1f58fe4e2f96bd6c8b4e
SHA512

7ad53a28b0a371c4f419d131a7b503c8eac774b54f9f56d3ba12bcc0162817a5c5d449927e240fdcbfafbbb0f1d13cd6bea4e663260164c70a6a1624da28d3a0
SSDEEP

384:ODvbC3yTGQsSDYHdTfoBiml+WX2n65+h7iQroC9CE5cXDQ3XdF4OrcaiBX/6:OgQsqgf3ml06sh7iQroCHWKYOghX/6

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.9c5764580f69d346803e96bdaa768c40.exe
- Size
  
  31KB
- MD5
  
  9c5764580f69d346803e96bdaa768c40
- SHA1
  
  300ab43c5269562b60adf73b00c1f80e0a9b6fcc
- SHA256
  
  6697b0aefaf8902f2449f66a7bcee61eba3108a73dfc1f58fe4e2f96bd6c8b4e
- SHA512
  
  7ad53a28b0a371c4f419d131a7b503c8eac774b54f9f56d3ba12bcc0162817a5c5d449927e240fdcbfafbbb0f1d13cd6bea4e663260164c70a6a1624da28d3a0
- SSDEEP
  
  384:ODvbC3yTGQsSDYHdTfoBiml+WX2n65+h7iQroC9CE5cXDQ3XdF4OrcaiBX/6:OgQsqgf3ml06sh7iQroCHWKYOghX/6
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2