c10a9918c2f8a252d2039561c1723e1cd942c631900791e22245b0b30a0edf21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca9c0f8940544fb3f5ee6eb62dc40620N.exe
Size

37KB
Sample

240802-y53gbaydrj
MD5

ca9c0f8940544fb3f5ee6eb62dc40620
SHA1

f87df209d17601a71abb3c898ebb4dc2a2554958
SHA256

c10a9918c2f8a252d2039561c1723e1cd942c631900791e22245b0b30a0edf21
SHA512

779659e8db5f3d6d76960a1348477e070417dfc26e00e9a565f1eb45b08b4d046cb745355be26d9511c18db48951e9c6926df6817bdcf35e683d54efa019287f
SSDEEP

384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yD8:MApQr0LvdFJI34nTkIU0Eyw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ca9c0f8940544fb3f5ee6eb62dc40620N.exe
- Size
  
  37KB
- MD5
  
  ca9c0f8940544fb3f5ee6eb62dc40620
- SHA1
  
  f87df209d17601a71abb3c898ebb4dc2a2554958
- SHA256
  
  c10a9918c2f8a252d2039561c1723e1cd942c631900791e22245b0b30a0edf21
- SHA512
  
  779659e8db5f3d6d76960a1348477e070417dfc26e00e9a565f1eb45b08b4d046cb745355be26d9511c18db48951e9c6926df6817bdcf35e683d54efa019287f
- SSDEEP
  
  384:MApc8m4e0LvQak4JI341CNabnkIU0Sq0yD8:MApQr0LvdFJI34nTkIU0Eyw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2