acb0596cf9719b7d81b6f9b02b8a5350621337ecf17a418e16d540b6f92c042f | Triage

Sharing

General

Target

c9a5d698fc6444a1536ad769c987a290N.exe
Size

232KB
Sample

240725-nnh18swflr
MD5

c9a5d698fc6444a1536ad769c987a290
SHA1

2339c16d3f707357069234544f74f39d11816a6d
SHA256

acb0596cf9719b7d81b6f9b02b8a5350621337ecf17a418e16d540b6f92c042f
SHA512

01b34f4c955a49458a4d13f85bb73bd7b692f76e7787c25870ffc2aed8b28bf7dc33927a31a574d208320f2ea4de61b14aac8a0b894f99cd0d1172932990e77c
SSDEEP

3072:GdbKQ2TSgZgehCjG8G3GbGVGBGfGuGxGWYcrf6Kadk:GdGQOSgOeAYcD6Kad

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c9a5d698fc6444a1536ad769c987a290N.exe
- Size
  
  232KB
- MD5
  
  c9a5d698fc6444a1536ad769c987a290
- SHA1
  
  2339c16d3f707357069234544f74f39d11816a6d
- SHA256
  
  acb0596cf9719b7d81b6f9b02b8a5350621337ecf17a418e16d540b6f92c042f
- SHA512
  
  01b34f4c955a49458a4d13f85bb73bd7b692f76e7787c25870ffc2aed8b28bf7dc33927a31a574d208320f2ea4de61b14aac8a0b894f99cd0d1172932990e77c
- SSDEEP
  
  3072:GdbKQ2TSgZgehCjG8G3GbGVGBGfGuGxGWYcrf6Kadk:GdGQOSgOeAYcD6Kad
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2