a1b4cc0c748760684cc1b6e86e610f46ef6b14d146758ec504c4882ee6e11a62 | Triage

Sharing

General

Target

XP启动介面.exe
Size

2.0MB
Sample

240510-p6f52aah89
MD5

9a644ed01c89d92b3eece3bbac6ec205
SHA1

8792a8f6a6a5a78334c11734d04d9756afc08930
SHA256

a1b4cc0c748760684cc1b6e86e610f46ef6b14d146758ec504c4882ee6e11a62
SHA512

dde41b1ebe47de6f7f0d643467de26e84e88212c418bd0ad6cd5c9657a625c1e6530833f358d23afcd4efc6b7082eb23f0595ac8890dc3c0bc2c49865379456c
SSDEEP

49152:DsXT4K8s+TaFrhNrv5LIqH6Z6auVTq6EQEUmVfCMJVTc:IX759zNrv5cm6Z6fVTuUm0M7g

Score

7^/10

Malware Config

Targets

- Target
  
  XP启动介面.exe
- Size
  
  2.0MB
- MD5
  
  9a644ed01c89d92b3eece3bbac6ec205
- SHA1
  
  8792a8f6a6a5a78334c11734d04d9756afc08930
- SHA256
  
  a1b4cc0c748760684cc1b6e86e610f46ef6b14d146758ec504c4882ee6e11a62
- SHA512
  
  dde41b1ebe47de6f7f0d643467de26e84e88212c418bd0ad6cd5c9657a625c1e6530833f358d23afcd4efc6b7082eb23f0595ac8890dc3c0bc2c49865379456c
- SSDEEP
  
  49152:DsXT4K8s+TaFrhNrv5LIqH6Z6auVTq6EQEUmVfCMJVTc:IX759zNrv5cm6Z6fVTuUm0M7g
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2