84a44aa633d6f7f1c0b4002a4fa09a67c2845c4e7ee0df1c71abc9ebb25c0e23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

999a7f9b57952721241cb21beb9a6ae0N.exe
Size

20KB
Sample

240716-k194psvcnm
MD5

999a7f9b57952721241cb21beb9a6ae0
SHA1

575175d41c87f7348251635b6d960940048977cf
SHA256

84a44aa633d6f7f1c0b4002a4fa09a67c2845c4e7ee0df1c71abc9ebb25c0e23
SHA512

da13c2d28031b996ccf3bf781db232d1d48873a3e39e4581ef4fe22c67c23c1fd07320eaacf4f5bd3bc2f8dfbf4dbacec37bb26df20ad15ff92d1719f98cd92f
SSDEEP

384:YpIT5mv2W8EfxKOx0hyWQ9Xc0TSj50ZLuKHuo:Y85mv2WHEOx0hyWQIULuKOo

Score

7^/10

Malware Config

Targets

- Target
  
  999a7f9b57952721241cb21beb9a6ae0N.exe
- Size
  
  20KB
- MD5
  
  999a7f9b57952721241cb21beb9a6ae0
- SHA1
  
  575175d41c87f7348251635b6d960940048977cf
- SHA256
  
  84a44aa633d6f7f1c0b4002a4fa09a67c2845c4e7ee0df1c71abc9ebb25c0e23
- SHA512
  
  da13c2d28031b996ccf3bf781db232d1d48873a3e39e4581ef4fe22c67c23c1fd07320eaacf4f5bd3bc2f8dfbf4dbacec37bb26df20ad15ff92d1719f98cd92f
- SSDEEP
  
  384:YpIT5mv2W8EfxKOx0hyWQ9Xc0TSj50ZLuKHuo:Y85mv2WHEOx0hyWQIULuKOo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2