73fd02a8b1bdc0b24969a8fbc40471e3cc531d77711cd74ec4358f86b1285c4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

index-win.exe
Size

36.1MB
Sample

240806-eepb8asglb
MD5

490865d4972e16ed7a46407af7cfc44c
SHA1

35d1831dfa1d96042238595d71d69f539acadba1
SHA256

73fd02a8b1bdc0b24969a8fbc40471e3cc531d77711cd74ec4358f86b1285c4a
SHA512

08e109b332c842bdfc712c8ab0124471dbddc2ef9d41ea0937b651af0741811cd52c617dfbee2666032dd0870bcde02dffb007b00ec19fdf89fdc0aeaacc62a8
SSDEEP

393216:W1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf/:WMguj8Q4VfvxqFTrYe

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  
  index-win.exe
- Size
  
  36.1MB
- MD5
  
  490865d4972e16ed7a46407af7cfc44c
- SHA1
  
  35d1831dfa1d96042238595d71d69f539acadba1
- SHA256
  
  73fd02a8b1bdc0b24969a8fbc40471e3cc531d77711cd74ec4358f86b1285c4a
- SHA512
  
  08e109b332c842bdfc712c8ab0124471dbddc2ef9d41ea0937b651af0741811cd52c617dfbee2666032dd0870bcde02dffb007b00ec19fdf89fdc0aeaacc62a8
- SSDEEP
  
  393216:W1Du8BtuBw2FEL3Z3aLUoQvo6LP/SgbSpYvKEh1EdKwlGQKPJuGsiTfREsrgCYf/:WMguj8Q4VfvxqFTrYe
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryexecution