87db2ad6763ef942b85eaa18dd46da52aac5a0439f03481309e33b628bb3d201 | Triage

Sharing

General

Target

87db2ad6763ef942b85eaa18dd46da52aac5a0439f03481309e33b628bb3d201.exe
Size

140KB
Sample

240523-b46q1sha8x
MD5

88f4c4e1817dff85942d26934aee4a81
SHA1

1c3c511f468c4bd011d5f5bf4496fd2a67882f3e
SHA256

87db2ad6763ef942b85eaa18dd46da52aac5a0439f03481309e33b628bb3d201
SHA512

179b76e152690d01c8a38a4712fe6cd342e1408673fb7630f0bcfe0de3d972d2782764e5481f486e500524e94c0d811ae2e5e12c99dee230644253b0c939f4a0
SSDEEP

768:OMr2id6gIzTSOVDkinKEbB+bBKF/8ncpROz3SeN/OVTg:OMvApkinDHWncSzSsU

Score

8^/10

Malware Config

Targets

- Target
  
  87db2ad6763ef942b85eaa18dd46da52aac5a0439f03481309e33b628bb3d201.exe
- Size
  
  140KB
- MD5
  
  88f4c4e1817dff85942d26934aee4a81
- SHA1
  
  1c3c511f468c4bd011d5f5bf4496fd2a67882f3e
- SHA256
  
  87db2ad6763ef942b85eaa18dd46da52aac5a0439f03481309e33b628bb3d201
- SHA512
  
  179b76e152690d01c8a38a4712fe6cd342e1408673fb7630f0bcfe0de3d972d2782764e5481f486e500524e94c0d811ae2e5e12c99dee230644253b0c939f4a0
- SSDEEP
  
  768:OMr2id6gIzTSOVDkinKEbB+bBKF/8ncpROz3SeN/OVTg:OMvApkinDHWncSzSsU
Score

8^/10
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2