ae4e0d4bc7aa210a07a56f78bd440ec8d17c53ccb8c91dea5bd29a501d3042ee | Triage

Sharing

General

Target

8bc97ffa19458add6b09ca13c67d6a00_NEAS
Size

84KB
Sample

240507-hxesaaea8t
MD5

8bc97ffa19458add6b09ca13c67d6a00
SHA1

26bb01c33c34158236e34b7733ecfdf8ff102af3
SHA256

ae4e0d4bc7aa210a07a56f78bd440ec8d17c53ccb8c91dea5bd29a501d3042ee
SHA512

595bb0e69ae32f895f1f3038f9fd271a3106b61bf9b8a8e1b6cdc268ff2fe343ba36b5ea61fffb5e03d48c2eea842eee0caa27d70e844f0cf6476beae108bce2
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNB3:vCjsIOtEvwDpj5H9YvQd2f

Score

7^/10

Malware Config

Targets

- Target
  
  8bc97ffa19458add6b09ca13c67d6a00_NEAS
- Size
  
  84KB
- MD5
  
  8bc97ffa19458add6b09ca13c67d6a00
- SHA1
  
  26bb01c33c34158236e34b7733ecfdf8ff102af3
- SHA256
  
  ae4e0d4bc7aa210a07a56f78bd440ec8d17c53ccb8c91dea5bd29a501d3042ee
- SHA512
  
  595bb0e69ae32f895f1f3038f9fd271a3106b61bf9b8a8e1b6cdc268ff2fe343ba36b5ea61fffb5e03d48c2eea842eee0caa27d70e844f0cf6476beae108bce2
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNB3:vCjsIOtEvwDpj5H9YvQd2f
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2