07876a24fdc06e690a85ee69f12ca99ec0c76075e4c6b8b8e7d1464b451beb10 | Triage

Sharing

General

Target

1ef677f4487ff54b9b55e3d018e16600N.exe
Size

35KB
Sample

240904-k1psrsydqf
MD5

1ef677f4487ff54b9b55e3d018e16600
SHA1

d22b324fa9614a84974294a353b4767115f1d727
SHA256

07876a24fdc06e690a85ee69f12ca99ec0c76075e4c6b8b8e7d1464b451beb10
SHA512

cdaee3b6e16e34d602a2bf91a387e464330b3f0998191e41f3baffb1a4a16cd10e86aff5fd12c3950c81fe61d3a3009d0cb2633a24a00c08afe69ef738b6dc2d
SSDEEP

384:MApc8m4e0GvQak4JI341C0abnk6hJPuM2Bp2hq:MApQr0GvdFJI34qTk6hJPf+p2hq

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1ef677f4487ff54b9b55e3d018e16600N.exe
- Size
  
  35KB
- MD5
  
  1ef677f4487ff54b9b55e3d018e16600
- SHA1
  
  d22b324fa9614a84974294a353b4767115f1d727
- SHA256
  
  07876a24fdc06e690a85ee69f12ca99ec0c76075e4c6b8b8e7d1464b451beb10
- SHA512
  
  cdaee3b6e16e34d602a2bf91a387e464330b3f0998191e41f3baffb1a4a16cd10e86aff5fd12c3950c81fe61d3a3009d0cb2633a24a00c08afe69ef738b6dc2d
- SSDEEP
  
  384:MApc8m4e0GvQak4JI341C0abnk6hJPuM2Bp2hq:MApQr0GvdFJI34qTk6hJPf+p2hq
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2