d8c5d0486e1ae534c8683e6b62f05a39575f8be1ce00fc77106faa2cff50edd4 | Triage

Sharing

General

Target

NEAS.5e75c30d8f1a6b4b8b2f22fbebe97e60.exe
Size

1.9MB
Sample

231107-v5r4sscd81
MD5

5e75c30d8f1a6b4b8b2f22fbebe97e60
SHA1

1db43da8554ecf3844e7315583e4fbb34ffec1a5
SHA256

d8c5d0486e1ae534c8683e6b62f05a39575f8be1ce00fc77106faa2cff50edd4
SHA512

929be7efdfe2547dd0b049203d75b7e0848bfba9f2e8a58aa207052e5a8b9b581a6828673de6307b397402a0264e32b36d3c530518d6c45a87a5fff6b9dd1808
SSDEEP

49152:R5TsuDpbTChxKCnFnQXBbrtgb/iQvu0UHO+8:R5g8p6hxvWbrtUTrUHOb

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.5e75c30d8f1a6b4b8b2f22fbebe97e60.exe
- Size
  
  1.9MB
- MD5
  
  5e75c30d8f1a6b4b8b2f22fbebe97e60
- SHA1
  
  1db43da8554ecf3844e7315583e4fbb34ffec1a5
- SHA256
  
  d8c5d0486e1ae534c8683e6b62f05a39575f8be1ce00fc77106faa2cff50edd4
- SHA512
  
  929be7efdfe2547dd0b049203d75b7e0848bfba9f2e8a58aa207052e5a8b9b581a6828673de6307b397402a0264e32b36d3c530518d6c45a87a5fff6b9dd1808
- SSDEEP
  
  49152:R5TsuDpbTChxKCnFnQXBbrtgb/iQvu0UHO+8:R5g8p6hxvWbrtUTrUHOb
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2