3f702d043640cb543c54e190a1bf83e445b21c384dedcab65ea8446876c66817 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5fd5a9438a943919e3664c0d19f3ab0N.exe
Size

37KB
Sample

240814-xd5a6axgkd
MD5

d5fd5a9438a943919e3664c0d19f3ab0
SHA1

db22f49d7663a5328334049f24763e538ce563d6
SHA256

3f702d043640cb543c54e190a1bf83e445b21c384dedcab65ea8446876c66817
SHA512

b46ab67e091e05116e6ca2565c3ac5a9b10faf79034d637dc24e2930ef6ae17aba491a4abdb258b1b262b5195e4b60220913eddbb3bb1b24e8d47f6cfd87c4e5
SSDEEP

384:8ymGIDl8anPvH4kyAP3VPmVUj42pOFCyoeTemVz06pRrLXCAlc8cw1A3dGKHWTch:8ymKUPvYePEUj4+OEWxDqn5HLh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d5fd5a9438a943919e3664c0d19f3ab0N.exe
- Size
  
  37KB
- MD5
  
  d5fd5a9438a943919e3664c0d19f3ab0
- SHA1
  
  db22f49d7663a5328334049f24763e538ce563d6
- SHA256
  
  3f702d043640cb543c54e190a1bf83e445b21c384dedcab65ea8446876c66817
- SHA512
  
  b46ab67e091e05116e6ca2565c3ac5a9b10faf79034d637dc24e2930ef6ae17aba491a4abdb258b1b262b5195e4b60220913eddbb3bb1b24e8d47f6cfd87c4e5
- SSDEEP
  
  384:8ymGIDl8anPvH4kyAP3VPmVUj42pOFCyoeTemVz06pRrLXCAlc8cw1A3dGKHWTch:8ymKUPvYePEUj4+OEWxDqn5HLh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2