3d23688120194ae76a64381881b517f6e6bbcbe7d207f55d38aa63adc81e1ee0 | Triage

Sharing

General

Target

3d23688120194ae76a64381881b517f6e6bbcbe7d207f55d38aa63adc81e1ee0N
Size

51KB
Sample

240920-1nmewazeqr
MD5

a4974a907fdb6078e978bc98d6268d50
SHA1

1d57f44c8639b69c0d7ea1e88e5c76950ae3b813
SHA256

3d23688120194ae76a64381881b517f6e6bbcbe7d207f55d38aa63adc81e1ee0
SHA512

b3f06b5ac27b6dfbc9a14622d72db30cf481ba937ae103e496f83f6c42718817e4121094f9c6fe845b522d3fb4f47b3cd2b1610171aed33ee631fe0058b8f742
SSDEEP

768:jxDDnyAiIbhn+oRTaFSxjquEDFAnA1tLRNk2djaYoCMHosOp:jxDDnd1Raqq2uBNdSCM2

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3d23688120194ae76a64381881b517f6e6bbcbe7d207f55d38aa63adc81e1ee0N
- Size
  
  51KB
- MD5
  
  a4974a907fdb6078e978bc98d6268d50
- SHA1
  
  1d57f44c8639b69c0d7ea1e88e5c76950ae3b813
- SHA256
  
  3d23688120194ae76a64381881b517f6e6bbcbe7d207f55d38aa63adc81e1ee0
- SHA512
  
  b3f06b5ac27b6dfbc9a14622d72db30cf481ba937ae103e496f83f6c42718817e4121094f9c6fe845b522d3fb4f47b3cd2b1610171aed33ee631fe0058b8f742
- SSDEEP
  
  768:jxDDnyAiIbhn+oRTaFSxjquEDFAnA1tLRNk2djaYoCMHosOp:jxDDnd1Raqq2uBNdSCM2
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2