b03122100bee936327618f3760267cbb5c77140b956eae8be583c5b370a6190a | Triage

Sharing

General

Target

cedeed996da040533fdafe4dc308ee40N.exe
Size

30KB
Sample

240721-qza6waseqh
MD5

cedeed996da040533fdafe4dc308ee40
SHA1

997954cd6d5661861a3db6467d07d4ca19f64dec
SHA256

b03122100bee936327618f3760267cbb5c77140b956eae8be583c5b370a6190a
SHA512

b8b381d77f13652604131ae9fe8fb1285e0eca51f9be30edeb0d9b6f4be79602d9a52550a0a7582980befb02010aca197acb0e2f1a087f78ee90533c63ca0a10
SSDEEP

384:6xaP8tE7bJDSxx5cLes01hUnOvKaP9NbBFiq8sSQlpeD35b4l/m/xn+//D7plP:+aP8yDSxLD2nOyaPb5zej5b4l/hD7plP

Score

7^/10

Malware Config

Targets

- Target
  
  cedeed996da040533fdafe4dc308ee40N.exe
- Size
  
  30KB
- MD5
  
  cedeed996da040533fdafe4dc308ee40
- SHA1
  
  997954cd6d5661861a3db6467d07d4ca19f64dec
- SHA256
  
  b03122100bee936327618f3760267cbb5c77140b956eae8be583c5b370a6190a
- SHA512
  
  b8b381d77f13652604131ae9fe8fb1285e0eca51f9be30edeb0d9b6f4be79602d9a52550a0a7582980befb02010aca197acb0e2f1a087f78ee90533c63ca0a10
- SSDEEP
  
  384:6xaP8tE7bJDSxx5cLes01hUnOvKaP9NbBFiq8sSQlpeD35b4l/m/xn+//D7plP:+aP8yDSxLD2nOyaPb5zej5b4l/hD7plP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2