6afb7bb97215878cea694f396e18c9563f8ed7456127da15eb8c8212e03887ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cea68dde621523b55b0cc2253e594490N.exe
Size

43KB
Sample

240819-gg2fns1aqr
MD5

cea68dde621523b55b0cc2253e594490
SHA1

5baff8309402964d7682fae2e5f81f8ab443ada4
SHA256

6afb7bb97215878cea694f396e18c9563f8ed7456127da15eb8c8212e03887ff
SHA512

df8d8ac094909b555c47dc32b704cbfe4123d40528fe0ea675f775e6cae248f8e7b022d2bcad4fc2d955db8fc148d93aa4b8f65c111193928f352d90cc138923
SSDEEP

768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1Wn2/:MAaDJlMsh7pWez8

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cea68dde621523b55b0cc2253e594490N.exe
- Size
  
  43KB
- MD5
  
  cea68dde621523b55b0cc2253e594490
- SHA1
  
  5baff8309402964d7682fae2e5f81f8ab443ada4
- SHA256
  
  6afb7bb97215878cea694f396e18c9563f8ed7456127da15eb8c8212e03887ff
- SHA512
  
  df8d8ac094909b555c47dc32b704cbfe4123d40528fe0ea675f775e6cae248f8e7b022d2bcad4fc2d955db8fc148d93aa4b8f65c111193928f352d90cc138923
- SSDEEP
  
  768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1Wn2/:MAaDJlMsh7pWez8
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2