56412d277fa7deae7e2e03fa4e2399be986a480d021254ba6aea1ef6ff311180 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.FileRepMalware.29205.27553.exe
Size

2.7MB
Sample

231223-etpxasgfg6
MD5

1e99a4380a58baa34f7f9dd0a22cfe15
SHA1

d0656f0672781b47b2f882e0226dcfaed23bb730
SHA256

56412d277fa7deae7e2e03fa4e2399be986a480d021254ba6aea1ef6ff311180
SHA512

9b754d09fdb62b2568ed98d0d6fb3e4abd830dea38c845d7c696e42ae481d2c311e25fd364f7f2f2ae01373f38ab331496b5c6491d4fafb75eaa91710e9abe45
SSDEEP

49152:nILHjyEDk9Uzu3dXM47n08XcJ2155oAHKi4BJHbT6XU4wdWyieOTX:nWjyEDkWS3dXMG08M81or/Heat+TX

Score

7^/10

Malware Config

Targets

- Target
  
  SecuriteInfo.com.FileRepMalware.29205.27553.exe
- Size
  
  2.7MB
- MD5
  
  1e99a4380a58baa34f7f9dd0a22cfe15
- SHA1
  
  d0656f0672781b47b2f882e0226dcfaed23bb730
- SHA256
  
  56412d277fa7deae7e2e03fa4e2399be986a480d021254ba6aea1ef6ff311180
- SHA512
  
  9b754d09fdb62b2568ed98d0d6fb3e4abd830dea38c845d7c696e42ae481d2c311e25fd364f7f2f2ae01373f38ab331496b5c6491d4fafb75eaa91710e9abe45
- SSDEEP
  
  49152:nILHjyEDk9Uzu3dXM47n08XcJ2155oAHKi4BJHbT6XU4wdWyieOTX:nWjyEDkWS3dXMG08M81or/Heat+TX
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2