162fbe207503a9d87a3f0719c3d216a9aff3a36f26808118ff2647fbbc3639f4 | Triage

Sharing

General

Target

52ebe6ea13495b632846ee7786611380N.exe
Size

78KB
Sample

240802-exvlyswalp
MD5

52ebe6ea13495b632846ee7786611380
SHA1

a303e5f018ca0003b6f3e97926ba20b50878b204
SHA256

162fbe207503a9d87a3f0719c3d216a9aff3a36f26808118ff2647fbbc3639f4
SHA512

59098ea7978a251342296dcc7d9bd1a4c4c64fad87e529f96df998f95160234696be9d75fa86525a78a0084ed8a0a6176e42a22dba545677a751879167acbfa5
SSDEEP

1536:6zfMMkqZPUMRsNFljx5sGOgMsqPhd976zdNE6ecbe1wA2sAVz2:AfMibQPj7Msq5j5cUwAZ4S

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  52ebe6ea13495b632846ee7786611380N.exe
- Size
  
  78KB
- MD5
  
  52ebe6ea13495b632846ee7786611380
- SHA1
  
  a303e5f018ca0003b6f3e97926ba20b50878b204
- SHA256
  
  162fbe207503a9d87a3f0719c3d216a9aff3a36f26808118ff2647fbbc3639f4
- SHA512
  
  59098ea7978a251342296dcc7d9bd1a4c4c64fad87e529f96df998f95160234696be9d75fa86525a78a0084ed8a0a6176e42a22dba545677a751879167acbfa5
- SSDEEP
  
  1536:6zfMMkqZPUMRsNFljx5sGOgMsqPhd976zdNE6ecbe1wA2sAVz2:AfMibQPj7Msq5j5cUwAZ4S
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2