ac294ca706565681e0392884db4a8fa2d526c988740cc557fa751e150fe6e59a | Triage

Sharing

General

Target

NEAS.e272f9634d827c13c29fba9e09bb0fd0.exe
Size

853KB
Sample

231107-xgbs1sfb44
MD5

e272f9634d827c13c29fba9e09bb0fd0
SHA1

56b8112c74662f95aaafb84a49018323ae5d6adb
SHA256

ac294ca706565681e0392884db4a8fa2d526c988740cc557fa751e150fe6e59a
SHA512

945fe34a1ae26bb694de25a08f037b552ac8c16d83b083ceb9e40b5f1304f6c92723eb3070d700c3b63bc799debe081fd3f411f0b0afba7df0aa9f3b66d84d48
SSDEEP

24576:2wzuQE6GScWQVMAHiksdAAZTCHIW+DZapYqT2o:hJE6I6+HkMT2o

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.e272f9634d827c13c29fba9e09bb0fd0.exe
- Size
  
  853KB
- MD5
  
  e272f9634d827c13c29fba9e09bb0fd0
- SHA1
  
  56b8112c74662f95aaafb84a49018323ae5d6adb
- SHA256
  
  ac294ca706565681e0392884db4a8fa2d526c988740cc557fa751e150fe6e59a
- SHA512
  
  945fe34a1ae26bb694de25a08f037b552ac8c16d83b083ceb9e40b5f1304f6c92723eb3070d700c3b63bc799debe081fd3f411f0b0afba7df0aa9f3b66d84d48
- SSDEEP
  
  24576:2wzuQE6GScWQVMAHiksdAAZTCHIW+DZapYqT2o:hJE6I6+HkMT2o
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2