a5a5bcbf2187e8eb3e1cc096d85febcd1520d8190a0309c6321ec83a05e83ac6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a5bcbf2187e8eb3e1cc096d85febcd1520d8190a0309c6321ec83a05e83ac6N.exe
Size

18KB
Sample

240925-bzbp3sxbmk
MD5

a0c43a1fe403a54f11539825a3941f00
SHA1

157aacf5e8aa78ea4f0f0579231580456113c718
SHA256

a5a5bcbf2187e8eb3e1cc096d85febcd1520d8190a0309c6321ec83a05e83ac6
SHA512

db93827aa4e3b2b3b4ca40d7a480ad87724ceddc9252f2d8f9356be73dcb110420d7a56d3a255b4d5ec39c27eb6d58634b52e3a06f671e623046a521c303046d
SSDEEP

192:Xar18KWSNqhFPOg6sFIKWtQesRNpVXrOUR9fvU4vXs1YNsTEDFGjO05nk3xwd0:SlWIqhFri/etjpV7OefvUmKGsw5C5yH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a5a5bcbf2187e8eb3e1cc096d85febcd1520d8190a0309c6321ec83a05e83ac6N.exe
- Size
  
  18KB
- MD5
  
  a0c43a1fe403a54f11539825a3941f00
- SHA1
  
  157aacf5e8aa78ea4f0f0579231580456113c718
- SHA256
  
  a5a5bcbf2187e8eb3e1cc096d85febcd1520d8190a0309c6321ec83a05e83ac6
- SHA512
  
  db93827aa4e3b2b3b4ca40d7a480ad87724ceddc9252f2d8f9356be73dcb110420d7a56d3a255b4d5ec39c27eb6d58634b52e3a06f671e623046a521c303046d
- SSDEEP
  
  192:Xar18KWSNqhFPOg6sFIKWtQesRNpVXrOUR9fvU4vXs1YNsTEDFGjO05nk3xwd0:SlWIqhFri/etjpV7OefvUmKGsw5C5yH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2