2825a2c24f4aa6627f5f42b887af258e835fc47051064ec07825390041c54542 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0b65a8fb3c9b28efe87dd18fbae9220N.exe
Size

9KB
Sample

240814-pve4lasemf
MD5

d0b65a8fb3c9b28efe87dd18fbae9220
SHA1

40a4e259f499c916cfe48e99e34f7f47f6391f3c
SHA256

2825a2c24f4aa6627f5f42b887af258e835fc47051064ec07825390041c54542
SHA512

2371bc17611c615f24ed9f8d310732fd08c33a6d20e02c52cdca32fc694fe353543d32edeac40a1ce704d492198a222f29032ede050959666e05230b9eb71b97
SSDEEP

96:aeZMykBKBK4aVSTmAMtrD9Y1MzeLjjtTZF00BDvIXUFc1LcihSyf3XDjQUsCQtcs:aPo4ITW2KqTt9F02fFca5yfVgcDuy7dU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d0b65a8fb3c9b28efe87dd18fbae9220N.exe
- Size
  
  9KB
- MD5
  
  d0b65a8fb3c9b28efe87dd18fbae9220
- SHA1
  
  40a4e259f499c916cfe48e99e34f7f47f6391f3c
- SHA256
  
  2825a2c24f4aa6627f5f42b887af258e835fc47051064ec07825390041c54542
- SHA512
  
  2371bc17611c615f24ed9f8d310732fd08c33a6d20e02c52cdca32fc694fe353543d32edeac40a1ce704d492198a222f29032ede050959666e05230b9eb71b97
- SSDEEP
  
  96:aeZMykBKBK4aVSTmAMtrD9Y1MzeLjjtTZF00BDvIXUFc1LcihSyf3XDjQUsCQtcs:aPo4ITW2KqTt9F02fFca5yfVgcDuy7dU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2