1ebec5513391b56aa07c261e231a60ed694d29c904499a69f5c40b9666f86072 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37b64e62da33ef2a2fc3114e2da11020N.exe
Size

44KB
Sample

240820-v67wmsvdjf
MD5

37b64e62da33ef2a2fc3114e2da11020
SHA1

c32d98763310583ce647353e8bb6639bb06139ce
SHA256

1ebec5513391b56aa07c261e231a60ed694d29c904499a69f5c40b9666f86072
SHA512

31863e873b300e6b9b090dc0ba0d8ddfdbbaa6be7fee30797361877b4426d1ce7f5a6ef86afb10c797f61c305ffca5985eeca916bd1db39bdd3d4f303df9b29e
SSDEEP

384:DLR7iSYIwM+6GyXzQNSOwOmOzO6iQspWGqYx1jYCKt7VpEi6xX+K2OexXjbuR6xs:DLR7ix70zQozpW7YYCqgiQ0OEmAm42v7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  37b64e62da33ef2a2fc3114e2da11020N.exe
- Size
  
  44KB
- MD5
  
  37b64e62da33ef2a2fc3114e2da11020
- SHA1
  
  c32d98763310583ce647353e8bb6639bb06139ce
- SHA256
  
  1ebec5513391b56aa07c261e231a60ed694d29c904499a69f5c40b9666f86072
- SHA512
  
  31863e873b300e6b9b090dc0ba0d8ddfdbbaa6be7fee30797361877b4426d1ce7f5a6ef86afb10c797f61c305ffca5985eeca916bd1db39bdd3d4f303df9b29e
- SSDEEP
  
  384:DLR7iSYIwM+6GyXzQNSOwOmOzO6iQspWGqYx1jYCKt7VpEi6xX+K2OexXjbuR6xs:DLR7ix70zQozpW7YYCqgiQ0OEmAm42v7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2