a4ddbf65a5cb2ed2413f6fe3f88c92e02f53b03430ac3704995f92d36f394b22 | Triage

Sharing

General

Target

4ecc6e14b5c56832997769967584a7c0N.exe
Size

156KB
Sample

240902-s2rmratdjm
MD5

4ecc6e14b5c56832997769967584a7c0
SHA1

78338806c20c5597bcc026a6d5b5c94e870e0074
SHA256

a4ddbf65a5cb2ed2413f6fe3f88c92e02f53b03430ac3704995f92d36f394b22
SHA512

b5baaa7904fa295ad900d50d4dc26c8b9e4ff4f6ec2f5e832e9bef8ef5842e5c831976298da42fa1539ffeb8941a81beeba0d2cfe1412b0502dfd0ad6c2481f4
SSDEEP

3072:AYy50Rnj7RLkstRFbBObCxame6GAgk6eM25TRzzHWvk6Cn:JLksVBObCxame6GAgTeM251zz8+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4ecc6e14b5c56832997769967584a7c0N.exe
- Size
  
  156KB
- MD5
  
  4ecc6e14b5c56832997769967584a7c0
- SHA1
  
  78338806c20c5597bcc026a6d5b5c94e870e0074
- SHA256
  
  a4ddbf65a5cb2ed2413f6fe3f88c92e02f53b03430ac3704995f92d36f394b22
- SHA512
  
  b5baaa7904fa295ad900d50d4dc26c8b9e4ff4f6ec2f5e832e9bef8ef5842e5c831976298da42fa1539ffeb8941a81beeba0d2cfe1412b0502dfd0ad6c2481f4
- SSDEEP
  
  3072:AYy50Rnj7RLkstRFbBObCxame6GAgk6eM25TRzzHWvk6Cn:JLksVBObCxame6GAgTeM251zz8+
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2