d3a84b1b8e86d01b50c96cf99d52b23d730aa6d92edf3aa6df51e514006fd0e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90657d2a56361a635b0b1567a1aca060N.exe
Size

236KB
Sample

240807-j9tmmsydna
MD5

90657d2a56361a635b0b1567a1aca060
SHA1

6a860c0ffedf0b8592b2cffebeefdd72c03178e5
SHA256

d3a84b1b8e86d01b50c96cf99d52b23d730aa6d92edf3aa6df51e514006fd0e9
SHA512

d603bb89cf15657b3b2c3a3d6060a541f37662f29273a45f712f5d6017e7de086c74475ccbd7d107f8765489a345f0c37243ea0c6c6f44834a06e680a5772a8f
SSDEEP

6144:dgHX5BGeyzxxWf26TUQ9NwWlIaL/j4CWzDS:dgHX58NxWPX9NwWqaDjZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  90657d2a56361a635b0b1567a1aca060N.exe
- Size
  
  236KB
- MD5
  
  90657d2a56361a635b0b1567a1aca060
- SHA1
  
  6a860c0ffedf0b8592b2cffebeefdd72c03178e5
- SHA256
  
  d3a84b1b8e86d01b50c96cf99d52b23d730aa6d92edf3aa6df51e514006fd0e9
- SHA512
  
  d603bb89cf15657b3b2c3a3d6060a541f37662f29273a45f712f5d6017e7de086c74475ccbd7d107f8765489a345f0c37243ea0c6c6f44834a06e680a5772a8f
- SSDEEP
  
  6144:dgHX5BGeyzxxWf26TUQ9NwWlIaL/j4CWzDS:dgHX58NxWPX9NwWqaDjZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2