b45fe721d44ee96d10c5437bd82ba95b33129b17da313b0ce26df1911aed5476 | Triage

Sharing

General

Target

eXeScope.exe
Size

545KB
Sample

240510-p6m9caah98
MD5

914466dbe5a5e9b4fb7f7e9b8249b2d3
SHA1

44e9656f30bf43fb7bd2d0ab500461753c542067
SHA256

b45fe721d44ee96d10c5437bd82ba95b33129b17da313b0ce26df1911aed5476
SHA512

36cd2dae5da618f0cb453109447596e93fad0baacd95d378e9c478d7fdf04b3a7194325d1ef774aece1c882f8f232555b6172a3249adf47cbf9def58ca3533a7
SSDEEP

12288:1srnQKTs4RHEWg4YrA1NakLtVTs34Nj3cJdWlX8sj/wxorMWcG4iN2gCu:1sTjQ4RHzg4Yr+tBskj3IdWusseQWfNr

Score

7^/10

Malware Config

Targets

- Target
  
  eXeScope.exe
- Size
  
  545KB
- MD5
  
  914466dbe5a5e9b4fb7f7e9b8249b2d3
- SHA1
  
  44e9656f30bf43fb7bd2d0ab500461753c542067
- SHA256
  
  b45fe721d44ee96d10c5437bd82ba95b33129b17da313b0ce26df1911aed5476
- SHA512
  
  36cd2dae5da618f0cb453109447596e93fad0baacd95d378e9c478d7fdf04b3a7194325d1ef774aece1c882f8f232555b6172a3249adf47cbf9def58ca3533a7
- SSDEEP
  
  12288:1srnQKTs4RHEWg4YrA1NakLtVTs34Nj3cJdWlX8sj/wxorMWcG4iN2gCu:1sTjQ4RHzg4Yr+tBskj3IdWusseQWfNr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2