f414978cf11dc507acec308d4d8fb64608b9db2daafe751016f9c8f63b2b30cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

699b8843fdfd30e4b8ba50a49acc37c0_NEAS
Size

32KB
Sample

240507-n55xbseh2z
MD5

699b8843fdfd30e4b8ba50a49acc37c0
SHA1

0b81c001c219b449b7e942c6fc1fc33d4173d285
SHA256

f414978cf11dc507acec308d4d8fb64608b9db2daafe751016f9c8f63b2b30cb
SHA512

a928046d39031debe4b14eedd4daa0ef87de4f4a89ef0413018f56f05c5a470cf27606fa632cbe76628686980134a9b78990da35817a17b48635865e4b833b04
SSDEEP

384:7VG/EvX8tHEnD+rPkChwWs2wToy8qSbsTo+mmzugT3q3ExEFtF2bcB+f:7I4DD+LzRRqjTo+FuE6ExcLIf

Score

7^/10

Malware Config

Targets

- Target
  
  699b8843fdfd30e4b8ba50a49acc37c0_NEAS
- Size
  
  32KB
- MD5
  
  699b8843fdfd30e4b8ba50a49acc37c0
- SHA1
  
  0b81c001c219b449b7e942c6fc1fc33d4173d285
- SHA256
  
  f414978cf11dc507acec308d4d8fb64608b9db2daafe751016f9c8f63b2b30cb
- SHA512
  
  a928046d39031debe4b14eedd4daa0ef87de4f4a89ef0413018f56f05c5a470cf27606fa632cbe76628686980134a9b78990da35817a17b48635865e4b833b04
- SSDEEP
  
  384:7VG/EvX8tHEnD+rPkChwWs2wToy8qSbsTo+mmzugT3q3ExEFtF2bcB+f:7I4DD+LzRRqjTo+FuE6ExcLIf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2