be0013dfb5c8a727646f8a90a1bb5a6ac1d487f7d0131080307e22bd8ded5f25 | Triage

Sharing

General

Target

d8ee27d807b9247a948cf6f96a3d8380N.exe
Size

34KB
Sample

240822-r72jgasgmc
MD5

d8ee27d807b9247a948cf6f96a3d8380
SHA1

58d774a0c61b8cec1b83baf51bfbfe9602a6b580
SHA256

be0013dfb5c8a727646f8a90a1bb5a6ac1d487f7d0131080307e22bd8ded5f25
SHA512

1f0249d1328252224f6e04a0644cf5cd2b16fe5dbb60d2809b96d540100c544197b3f7005a00ab578edbf2df379433d49f619e549820f29c86c188ac6398fd41
SSDEEP

384:MApc8m4e0GvQak4JI341C0abnk6hJPuM2B:MApQr0GvdFJI34qTk6hJPfU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  d8ee27d807b9247a948cf6f96a3d8380N.exe
- Size
  
  34KB
- MD5
  
  d8ee27d807b9247a948cf6f96a3d8380
- SHA1
  
  58d774a0c61b8cec1b83baf51bfbfe9602a6b580
- SHA256
  
  be0013dfb5c8a727646f8a90a1bb5a6ac1d487f7d0131080307e22bd8ded5f25
- SHA512
  
  1f0249d1328252224f6e04a0644cf5cd2b16fe5dbb60d2809b96d540100c544197b3f7005a00ab578edbf2df379433d49f619e549820f29c86c188ac6398fd41
- SSDEEP
  
  384:MApc8m4e0GvQak4JI341C0abnk6hJPuM2B:MApQr0GvdFJI34qTk6hJPfU
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2