a6a3b9bb3e9d0f8fde3b80d9916d58a3d28804d4f8d4013dd1467a2e2315a1d4 | Triage

Sharing

General

Target

57c03efde09b82005e7faffbb42bbb50N.exe
Size

1.8MB
Sample

240713-gtahqa1cqa
MD5

57c03efde09b82005e7faffbb42bbb50
SHA1

82e0f822d89c667d0e0585563b1d801c8e8d36d7
SHA256

a6a3b9bb3e9d0f8fde3b80d9916d58a3d28804d4f8d4013dd1467a2e2315a1d4
SHA512

25ab292325eca30f918d09274d10b2d405cf84c76a21ccfc42fbbe7bb1999bd161d7ea6223bc7c192516b9e0eadc57db8b580a6c0188b5e4303e2cc7ab44c606
SSDEEP

49152:tylFHUv6ReIt0jSrOogENXwu3qCqtKBjJj4Ba:0lFHU85t0jS/gENAu6ChJjAa

Score

7^/10

Malware Config

Targets

- Target
  
  57c03efde09b82005e7faffbb42bbb50N.exe
- Size
  
  1.8MB
- MD5
  
  57c03efde09b82005e7faffbb42bbb50
- SHA1
  
  82e0f822d89c667d0e0585563b1d801c8e8d36d7
- SHA256
  
  a6a3b9bb3e9d0f8fde3b80d9916d58a3d28804d4f8d4013dd1467a2e2315a1d4
- SHA512
  
  25ab292325eca30f918d09274d10b2d405cf84c76a21ccfc42fbbe7bb1999bd161d7ea6223bc7c192516b9e0eadc57db8b580a6c0188b5e4303e2cc7ab44c606
- SSDEEP
  
  49152:tylFHUv6ReIt0jSrOogENXwu3qCqtKBjJj4Ba:0lFHU85t0jS/gENAu6ChJjAa
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2