5a387e8723e18188137b423b9b8556e52e4a75488325578f9991becc46c74b42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95294171cce51e60505e05e48e308620N.exe
Size

100KB
Sample

240819-e6tq1svame
MD5

95294171cce51e60505e05e48e308620
SHA1

6bf69d67dbe0bbe417609d8721d46bc2e2a64e4a
SHA256

5a387e8723e18188137b423b9b8556e52e4a75488325578f9991becc46c74b42
SHA512

7c6a457e478e67ccb332569d05d7f52b0c1a9ce613e14e273f80100697dc51467dd8a0cb45929447d295a61b6fa06eda377a3135350659be2b35647ba06a6581
SSDEEP

3072:CHtLm4Y2ppEp77xwxYjCSA7Ius0fpLt1s:gC2zEpxwxBSA7G0fpLt1

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  95294171cce51e60505e05e48e308620N.exe
- Size
  
  100KB
- MD5
  
  95294171cce51e60505e05e48e308620
- SHA1
  
  6bf69d67dbe0bbe417609d8721d46bc2e2a64e4a
- SHA256
  
  5a387e8723e18188137b423b9b8556e52e4a75488325578f9991becc46c74b42
- SHA512
  
  7c6a457e478e67ccb332569d05d7f52b0c1a9ce613e14e273f80100697dc51467dd8a0cb45929447d295a61b6fa06eda377a3135350659be2b35647ba06a6581
- SSDEEP
  
  3072:CHtLm4Y2ppEp77xwxYjCSA7Ius0fpLt1s:gC2zEpxwxBSA7G0fpLt1
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2