7e5ae873aacfd161eadcce77995e83ce3da69baa4bfa70f6c502d3b6fb9d0a8d | Triage

Sharing

General

Target

7e5ae873aacfd161eadcce77995e83ce3da69baa4bfa70f6c502d3b6fb9d0a8d
Size

23KB
Sample

240927-29kzlsxcle
MD5

f4afc1da091113750304de62ea7c49ae
SHA1

3e9bc4c014df75e3020e0f6ad70486bf6d552ee6
SHA256

7e5ae873aacfd161eadcce77995e83ce3da69baa4bfa70f6c502d3b6fb9d0a8d
SHA512

9884232b680f05a20b5595b9a729d95c17dbe31ffb662df6073b63d16884ad74c0dee5172ff6cdc7072dc9434be123947639c379e47e1de7c8570214d3f19936
SSDEEP

384:YpIT5mv2W8EfxKOx0hyWQ9Xc0TSj50ZLuKHu52ifdL:Y85mv2WHEOx0hyWQIULuKO5zdL

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  7e5ae873aacfd161eadcce77995e83ce3da69baa4bfa70f6c502d3b6fb9d0a8d
- Size
  
  23KB
- MD5
  
  f4afc1da091113750304de62ea7c49ae
- SHA1
  
  3e9bc4c014df75e3020e0f6ad70486bf6d552ee6
- SHA256
  
  7e5ae873aacfd161eadcce77995e83ce3da69baa4bfa70f6c502d3b6fb9d0a8d
- SHA512
  
  9884232b680f05a20b5595b9a729d95c17dbe31ffb662df6073b63d16884ad74c0dee5172ff6cdc7072dc9434be123947639c379e47e1de7c8570214d3f19936
- SSDEEP
  
  384:YpIT5mv2W8EfxKOx0hyWQ9Xc0TSj50ZLuKHu52ifdL:Y85mv2WHEOx0hyWQIULuKO5zdL
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2