1e12892d4c497d1bd8126c57e27b16cc8bbe483dfad8b69dd3acb61c6070e384 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0cb461f3a8f797e15dc6931d1577620N.exe
Size

44KB
Sample

240814-lq6tzazfpn
MD5

b0cb461f3a8f797e15dc6931d1577620
SHA1

95ade8753bcee35d5a13534c7c16cf4c4caad741
SHA256

1e12892d4c497d1bd8126c57e27b16cc8bbe483dfad8b69dd3acb61c6070e384
SHA512

5356d2e9bd94a95af62f9d03665b64895833126401bf83535879dd082b241952b3da6f0171bfb14cdd5c29dd44a17bf0a69d2e4a6c7bf66dfd8dbfd2febbeb62
SSDEEP

768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1aSMAK:MAaDJlMsh7pWez+MD

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b0cb461f3a8f797e15dc6931d1577620N.exe
- Size
  
  44KB
- MD5
  
  b0cb461f3a8f797e15dc6931d1577620
- SHA1
  
  95ade8753bcee35d5a13534c7c16cf4c4caad741
- SHA256
  
  1e12892d4c497d1bd8126c57e27b16cc8bbe483dfad8b69dd3acb61c6070e384
- SHA512
  
  5356d2e9bd94a95af62f9d03665b64895833126401bf83535879dd082b241952b3da6f0171bfb14cdd5c29dd44a17bf0a69d2e4a6c7bf66dfd8dbfd2febbeb62
- SSDEEP
  
  768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1aSMAK:MAaDJlMsh7pWez+MD
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2