80ec7f291748e713740c308090cc10231f18cb4685190862e2de491acd5abe21 | Triage

Sharing

General

Target

323ab7aef5b64e42bfd471b7538e11a0N.exe
Size

34KB
Sample

240726-vejpqstgja
MD5

323ab7aef5b64e42bfd471b7538e11a0
SHA1

d4025c66fe6441258293ae802dc07959f9c7d6b7
SHA256

80ec7f291748e713740c308090cc10231f18cb4685190862e2de491acd5abe21
SHA512

4d3832a709af42a0eb571cd17714f62fc1b648f60e43761f35d13fe628fa77f82797a73d8b198e04dbd4e073175e6007f5d501fed11f8c95c7ede2abda765d4a
SSDEEP

384:FFnwR2IT1XKqC9YATzWLkAzFAll6EPDLO7nsBGXNOgldlMm:LwRrT16WFFAv6EPDSEGggXWm

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  323ab7aef5b64e42bfd471b7538e11a0N.exe
- Size
  
  34KB
- MD5
  
  323ab7aef5b64e42bfd471b7538e11a0
- SHA1
  
  d4025c66fe6441258293ae802dc07959f9c7d6b7
- SHA256
  
  80ec7f291748e713740c308090cc10231f18cb4685190862e2de491acd5abe21
- SHA512
  
  4d3832a709af42a0eb571cd17714f62fc1b648f60e43761f35d13fe628fa77f82797a73d8b198e04dbd4e073175e6007f5d501fed11f8c95c7ede2abda765d4a
- SSDEEP
  
  384:FFnwR2IT1XKqC9YATzWLkAzFAll6EPDLO7nsBGXNOgldlMm:LwRrT16WFFAv6EPDSEGggXWm
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2