ea393b7df92bf7ba5c9ac8381fbaf973979272652791cd44fd7bd2b982156369 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95639d2f91fbfc9f782f6ff234885020N
Size

46KB
Sample

240908-eamylatgqj
MD5

95639d2f91fbfc9f782f6ff234885020
SHA1

f4aa89c2d3bb61d9c4f97e0786f1e566f92b5977
SHA256

ea393b7df92bf7ba5c9ac8381fbaf973979272652791cd44fd7bd2b982156369
SHA512

19cf3108d066fb4343a2ddbc29867996915ff06415ed0a5d9b94a7955e582358dd838bd86da57e783288e622cb95957674e239f30960a9cca210e0763fe7ff51
SSDEEP

768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1aSMAPk:MAaDJlMsh7pWez+Mx

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  95639d2f91fbfc9f782f6ff234885020N
- Size
  
  46KB
- MD5
  
  95639d2f91fbfc9f782f6ff234885020
- SHA1
  
  f4aa89c2d3bb61d9c4f97e0786f1e566f92b5977
- SHA256
  
  ea393b7df92bf7ba5c9ac8381fbaf973979272652791cd44fd7bd2b982156369
- SHA512
  
  19cf3108d066fb4343a2ddbc29867996915ff06415ed0a5d9b94a7955e582358dd838bd86da57e783288e622cb95957674e239f30960a9cca210e0763fe7ff51
- SSDEEP
  
  768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1aSMAPk:MAaDJlMsh7pWez+Mx
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2