8bd3992c69e0e3498dafd2b5514b335ae349ea979e262bb41f767db5ed8bb81a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c103f3fa852a3ea4b78a9486d36a2dd0N.exe
Size

29KB
Sample

240805-w93lrsybqf
MD5

c103f3fa852a3ea4b78a9486d36a2dd0
SHA1

ee7efcaa522cc441236556f876b5300d63dba6be
SHA256

8bd3992c69e0e3498dafd2b5514b335ae349ea979e262bb41f767db5ed8bb81a
SHA512

dac4b134b9426d3c6d16ddc876571d8c704f974c2b481e0f644aa826ef9eee92c8abd48e923b53e060424ce0202a93ec6167b0f13e5d000a543cc202342f1332
SSDEEP

384:uu/JYSrFQjGxzfNHP151QUzMk9hBcecy44hLyG+mOM8gqQUmt8Kgmbo9yxQwkeT:d/3xd1HXzoy44hXPnhtNpxpT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c103f3fa852a3ea4b78a9486d36a2dd0N.exe
- Size
  
  29KB
- MD5
  
  c103f3fa852a3ea4b78a9486d36a2dd0
- SHA1
  
  ee7efcaa522cc441236556f876b5300d63dba6be
- SHA256
  
  8bd3992c69e0e3498dafd2b5514b335ae349ea979e262bb41f767db5ed8bb81a
- SHA512
  
  dac4b134b9426d3c6d16ddc876571d8c704f974c2b481e0f644aa826ef9eee92c8abd48e923b53e060424ce0202a93ec6167b0f13e5d000a543cc202342f1332
- SSDEEP
  
  384:uu/JYSrFQjGxzfNHP151QUzMk9hBcecy44hLyG+mOM8gqQUmt8Kgmbo9yxQwkeT:d/3xd1HXzoy44hXPnhtNpxpT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2