60a628623fbbda7bea3b2b3cf12e19dee7abb1b88ac3f56d959117dbb3f2b975 | Triage

Sharing

General

Target

sogou_pinyin_setup.exe
Size

1.3MB
Sample

240408-pf3lcagh74
MD5

c1b289e4a79283608e0d36222ad282ce
SHA1

51c5f21aea3da41e876880399fcd7dec1e768ff1
SHA256

60a628623fbbda7bea3b2b3cf12e19dee7abb1b88ac3f56d959117dbb3f2b975
SHA512

06e42b688a9ec908d330701c4331600c9a2d3bb417b9f51127a3ea43c1c388dc4f39a28885478dae0f0d2a483b3610ae43923dd2c6a200cef1e102573da3f58c
SSDEEP

24576:i2G/nvxW3W6uuSpQQKD2NUA+jAhBL6ICxZhX1GZqN3YQlkoKtUslU8vCUtm:ibA3EJdC2NlOc0ICFXwZ+zlZmUKJCUtm

Score

7^/10

Malware Config

Targets

- Target
  
  sogou_pinyin_setup.exe
- Size
  
  1.3MB
- MD5
  
  c1b289e4a79283608e0d36222ad282ce
- SHA1
  
  51c5f21aea3da41e876880399fcd7dec1e768ff1
- SHA256
  
  60a628623fbbda7bea3b2b3cf12e19dee7abb1b88ac3f56d959117dbb3f2b975
- SHA512
  
  06e42b688a9ec908d330701c4331600c9a2d3bb417b9f51127a3ea43c1c388dc4f39a28885478dae0f0d2a483b3610ae43923dd2c6a200cef1e102573da3f58c
- SSDEEP
  
  24576:i2G/nvxW3W6uuSpQQKD2NUA+jAhBL6ICxZhX1GZqN3YQlkoKtUslU8vCUtm:ibA3EJdC2NlOc0ICFXwZ+zlZmUKJCUtm
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2