0537b9440b46e8941aabba8adce9245c4157122cb64298c62fcef534b934e52b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

929cb682981dba61cfe6081b07c614d0N.exe
Size

2.4MB
Sample

240806-l5vp9azgnd
MD5

929cb682981dba61cfe6081b07c614d0
SHA1

caea812066e61bdae3cecdb04980fca36ddbae35
SHA256

0537b9440b46e8941aabba8adce9245c4157122cb64298c62fcef534b934e52b
SHA512

6dbd05e17dd96d9c67a05dc088a2d0ea72d73d836119c698287e66abecc693082f888a4c6ee013dff94ddd31df9a35c5258135511fe8c61abe548860f1160daf
SSDEEP

49152:1k47b5v+2me2n7tzYRnIXNy3Xe98MwsUUTiz19c2AtsNLELahbIfj5qYp:1v7bl+2yn7BYGNy3XFwUU+Xc2A+uLahw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  929cb682981dba61cfe6081b07c614d0N.exe
- Size
  
  2.4MB
- MD5
  
  929cb682981dba61cfe6081b07c614d0
- SHA1
  
  caea812066e61bdae3cecdb04980fca36ddbae35
- SHA256
  
  0537b9440b46e8941aabba8adce9245c4157122cb64298c62fcef534b934e52b
- SHA512
  
  6dbd05e17dd96d9c67a05dc088a2d0ea72d73d836119c698287e66abecc693082f888a4c6ee013dff94ddd31df9a35c5258135511fe8c61abe548860f1160daf
- SSDEEP
  
  49152:1k47b5v+2me2n7tzYRnIXNy3Xe98MwsUUTiz19c2AtsNLELahbIfj5qYp:1v7bl+2yn7BYGNy3XFwUU+Xc2A+uLahw
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2