e90820e973087afb8a4f8b23b73d07f7c63a059e0faea498058bcb2fe17cb90d | Triage

Sharing

General

Target

b589ee67c0bdb784e379e47fdd51d2c1.bin
Size

31KB
Sample

240307-dn8xjseg4s
MD5

b589ee67c0bdb784e379e47fdd51d2c1
SHA1

f8cff433de4a25dbbb38830a0c0c3d6edaf00ad6
SHA256

e90820e973087afb8a4f8b23b73d07f7c63a059e0faea498058bcb2fe17cb90d
SHA512

281cd100fdfbe3a04845ecfe0c177daf80ce7134778516625ff231aa1b300e167d3c4a94ade5843c71ff27de3a87b206c0bd455a7d2692d400b4cca2cdacbdad
SSDEEP

384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn8YtRQM:b/yC4GyNM01GuQMNXw2PSjXZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b589ee67c0bdb784e379e47fdd51d2c1.bin
- Size
  
  31KB
- MD5
  
  b589ee67c0bdb784e379e47fdd51d2c1
- SHA1
  
  f8cff433de4a25dbbb38830a0c0c3d6edaf00ad6
- SHA256
  
  e90820e973087afb8a4f8b23b73d07f7c63a059e0faea498058bcb2fe17cb90d
- SHA512
  
  281cd100fdfbe3a04845ecfe0c177daf80ce7134778516625ff231aa1b300e167d3c4a94ade5843c71ff27de3a87b206c0bd455a7d2692d400b4cca2cdacbdad
- SSDEEP
  
  384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSzn8YtRQM:b/yC4GyNM01GuQMNXw2PSjXZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2