0bee3bfc9cd0015967c1863eff6bd058bd11093a23939d767f1f26c9daa4692e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bee3bfc9cd0015967c1863eff6bd058bd11093a23939d767f1f26c9daa4692e.exe
Size

30KB
Sample

240524-ny7scagb8v
MD5

04b520176bb1bdf28f8c5833a40e57a4
SHA1

fa555d800813482de5cec61e57c7bdae74762051
SHA256

0bee3bfc9cd0015967c1863eff6bd058bd11093a23939d767f1f26c9daa4692e
SHA512

9b6ad425188e0d0f34994437ec813aeb7d1023e8568f0ef3f85261c5512a3625f9c10f14b8e87f897d459aef3b46b65c8c08f8aac2c805e93ecb5670318faf9b
SSDEEP

768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfM:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XR

Score

7^/10

Malware Config

Targets

- Target
  
  0bee3bfc9cd0015967c1863eff6bd058bd11093a23939d767f1f26c9daa4692e.exe
- Size
  
  30KB
- MD5
  
  04b520176bb1bdf28f8c5833a40e57a4
- SHA1
  
  fa555d800813482de5cec61e57c7bdae74762051
- SHA256
  
  0bee3bfc9cd0015967c1863eff6bd058bd11093a23939d767f1f26c9daa4692e
- SHA512
  
  9b6ad425188e0d0f34994437ec813aeb7d1023e8568f0ef3f85261c5512a3625f9c10f14b8e87f897d459aef3b46b65c8c08f8aac2c805e93ecb5670318faf9b
- SSDEEP
  
  768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfM:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2