4e689e459a150fe0c78ed464629bfc7827a6e9c927faa04c0c01114432bdecbe | Triage

Sharing

General

Target

e6d5bfc0453246755a14fecf7e436db0.exe
Size

59KB
Sample

240108-y6gagahgfl
MD5

e6d5bfc0453246755a14fecf7e436db0
SHA1

820abcbcb0f5a4843a83f022b248639c0ef1df18
SHA256

4e689e459a150fe0c78ed464629bfc7827a6e9c927faa04c0c01114432bdecbe
SHA512

8d1244756173e2324ba78d12bde1842c2af65e0cfd3a0faf746e62aa731e2a177f5610ba7318aaf7924590c3b5263ef1c9203cab85d1e99f6cd1ced4d3d52a19
SSDEEP

384:+5rDuuOFpEauMLfQDb2pproT/z4m5m1GJE6Al6z8yXDTLhruuuui:MDcpEBMLfQcubV5wGE96YyXDTLduuuui

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  e6d5bfc0453246755a14fecf7e436db0.exe
- Size
  
  59KB
- MD5
  
  e6d5bfc0453246755a14fecf7e436db0
- SHA1
  
  820abcbcb0f5a4843a83f022b248639c0ef1df18
- SHA256
  
  4e689e459a150fe0c78ed464629bfc7827a6e9c927faa04c0c01114432bdecbe
- SHA512
  
  8d1244756173e2324ba78d12bde1842c2af65e0cfd3a0faf746e62aa731e2a177f5610ba7318aaf7924590c3b5263ef1c9203cab85d1e99f6cd1ced4d3d52a19
- SSDEEP
  
  384:+5rDuuOFpEauMLfQDb2pproT/z4m5m1GJE6Al6z8yXDTLhruuuui:MDcpEBMLfQcubV5wGE96YyXDTLduuuui
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2