3549e2e1d9db35fe2088be530c3c6592247130e942f0a10100bc3edc169a0dcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b10c0d2b7067d05dd5e424fb0f4d630N.exe
Size

4KB
Sample

240724-czr8hawfjg
MD5

3b10c0d2b7067d05dd5e424fb0f4d630
SHA1

1ff343fdf7e3ac698796e5499a5624c1bb2f4f54
SHA256

3549e2e1d9db35fe2088be530c3c6592247130e942f0a10100bc3edc169a0dcf
SHA512

fa6ecd28ede7368098eecb5e8225f538bf22d672d681d6a60682594b60fd78934632d724263ad83c116359ff26a36de8da4cf77b28dfe51ad3e833d915c636dc
SSDEEP

96:Zqv4mQMKh9ctgCVRvnKymV44q924ouYeED:jmQMKsnvnKfzqs4ieA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3b10c0d2b7067d05dd5e424fb0f4d630N.exe
- Size
  
  4KB
- MD5
  
  3b10c0d2b7067d05dd5e424fb0f4d630
- SHA1
  
  1ff343fdf7e3ac698796e5499a5624c1bb2f4f54
- SHA256
  
  3549e2e1d9db35fe2088be530c3c6592247130e942f0a10100bc3edc169a0dcf
- SHA512
  
  fa6ecd28ede7368098eecb5e8225f538bf22d672d681d6a60682594b60fd78934632d724263ad83c116359ff26a36de8da4cf77b28dfe51ad3e833d915c636dc
- SSDEEP
  
  96:Zqv4mQMKh9ctgCVRvnKymV44q924ouYeED:jmQMKsnvnKfzqs4ieA
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2