9bd829134f201c681dd17c2e3a820cc2c279f12f5f2ef3b407338fa230abb727 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

180b44ba88dd156e363703109c993860N.exe
Size

14KB
Sample

240711-3wxlxssdjc
MD5

180b44ba88dd156e363703109c993860
SHA1

be8752f3ee368fa17df6ed1a7bbb0e2a50a42c10
SHA256

9bd829134f201c681dd17c2e3a820cc2c279f12f5f2ef3b407338fa230abb727
SHA512

cf619f1b37e11265c213341939c9aa7eb6d3b824c0ee3b1f252ca2dc6110953db8e2e22b49604e6af13b8d8ba9c041b1c237ff62b00a7b400b51ee91b5efd45a
SSDEEP

192:Rt6tz6zQ6tnwR2bUifLDBH56oscMCg/HtH4KCHKNHpVEqSA:WAzVtnwR2xz9H2YKaKNHbzSA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  180b44ba88dd156e363703109c993860N.exe
- Size
  
  14KB
- MD5
  
  180b44ba88dd156e363703109c993860
- SHA1
  
  be8752f3ee368fa17df6ed1a7bbb0e2a50a42c10
- SHA256
  
  9bd829134f201c681dd17c2e3a820cc2c279f12f5f2ef3b407338fa230abb727
- SHA512
  
  cf619f1b37e11265c213341939c9aa7eb6d3b824c0ee3b1f252ca2dc6110953db8e2e22b49604e6af13b8d8ba9c041b1c237ff62b00a7b400b51ee91b5efd45a
- SSDEEP
  
  192:Rt6tz6zQ6tnwR2bUifLDBH56oscMCg/HtH4KCHKNHpVEqSA:WAzVtnwR2xz9H2YKaKNHbzSA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2