a252276777ce3da28394e806bea4d30056d89c20b13e6d50b03ca97bb5ab9a2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12726f5e979504c1990586eea19d3229
Size

14KB
Sample

231219-neqdysahen
MD5

12726f5e979504c1990586eea19d3229
SHA1

23e72fa0d8edbf946013b0261af9f0a4226ba576
SHA256

a252276777ce3da28394e806bea4d30056d89c20b13e6d50b03ca97bb5ab9a2d
SHA512

4904837268e5831b3c9b3c25f89e64c3e276957b85e94e3886bc58a03e0c38fa46b54a3cc80e2fbd37affc680ea2b73576dadf4f959a71dabed4f58099895d39
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYx:hDXWipuE+K3/SSHgxmx

Score

7^/10

Malware Config

Targets

- Target
  
  12726f5e979504c1990586eea19d3229
- Size
  
  14KB
- MD5
  
  12726f5e979504c1990586eea19d3229
- SHA1
  
  23e72fa0d8edbf946013b0261af9f0a4226ba576
- SHA256
  
  a252276777ce3da28394e806bea4d30056d89c20b13e6d50b03ca97bb5ab9a2d
- SHA512
  
  4904837268e5831b3c9b3c25f89e64c3e276957b85e94e3886bc58a03e0c38fa46b54a3cc80e2fbd37affc680ea2b73576dadf4f959a71dabed4f58099895d39
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhYx:hDXWipuE+K3/SSHgxmx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2