abe6bbcc17daab32255af59cc07e30625fd873ef64cb9a1c8969b945ddaee21f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2c84f8ce0bad4a286e54683d8c47f60N.exe
Size

34KB
Sample

240907-ns91hssdrp
MD5

a2c84f8ce0bad4a286e54683d8c47f60
SHA1

6ddff73ed01f475490ad8c1759aac537959a9c11
SHA256

abe6bbcc17daab32255af59cc07e30625fd873ef64cb9a1c8969b945ddaee21f
SHA512

2ea95ff4e447bd2d876b23657851fe2d9bf1866fb15685ad94b19a7ef0262cef6676963d9c911c922da1bdb6eae482f5788581e86fad0dc0185cce4779348203
SSDEEP

768:nQv/YOZIgQtz8GEkT9oe2lxUCuY9m9e9tdEI2MyzNORQtOflIwoHNM2XBFV7WB7B:Qv/pZIgQtz8GEkT9oe2lxUCHCetdEI2C

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a2c84f8ce0bad4a286e54683d8c47f60N.exe
- Size
  
  34KB
- MD5
  
  a2c84f8ce0bad4a286e54683d8c47f60
- SHA1
  
  6ddff73ed01f475490ad8c1759aac537959a9c11
- SHA256
  
  abe6bbcc17daab32255af59cc07e30625fd873ef64cb9a1c8969b945ddaee21f
- SHA512
  
  2ea95ff4e447bd2d876b23657851fe2d9bf1866fb15685ad94b19a7ef0262cef6676963d9c911c922da1bdb6eae482f5788581e86fad0dc0185cce4779348203
- SSDEEP
  
  768:nQv/YOZIgQtz8GEkT9oe2lxUCuY9m9e9tdEI2MyzNORQtOflIwoHNM2XBFV7WB7B:Qv/pZIgQtz8GEkT9oe2lxUCHCetdEI2C
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2