1066659b0a4d81ab4291c100dfa2e770a2a0d71cf1e7912a26efde7cff9a9cb6 | Triage

Sharing

General

Target

1066659b0a4d81ab4291c100dfa2e770a2a0d71cf1e7912a26efde7cff9a9cb6N.exe
Size

521KB
Sample

241119-lvxf4atdqb
MD5

f2736d53d3a1d83765d4b0c9b1c66cc0
SHA1

c5987fc8a3906b73b08bacee747b88a564bfdf0d
SHA256

1066659b0a4d81ab4291c100dfa2e770a2a0d71cf1e7912a26efde7cff9a9cb6
SHA512

c48a030b09b11bee9f955b8057539899804411044d88168570d5b652c6ee36e9e2f4669f8231d258220b17cb9efcf91bda86f27e7219f2f845a87fa782e50ecf
SSDEEP

6144:KyH7xOc6H5c6HcT66vlmneTEyz4Y+kh6wHfta4FSzAfPbIa:KaVz4C6IHfPbH

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1066659b0a4d81ab4291c100dfa2e770a2a0d71cf1e7912a26efde7cff9a9cb6N.exe
- Size
  
  521KB
- MD5
  
  f2736d53d3a1d83765d4b0c9b1c66cc0
- SHA1
  
  c5987fc8a3906b73b08bacee747b88a564bfdf0d
- SHA256
  
  1066659b0a4d81ab4291c100dfa2e770a2a0d71cf1e7912a26efde7cff9a9cb6
- SHA512
  
  c48a030b09b11bee9f955b8057539899804411044d88168570d5b652c6ee36e9e2f4669f8231d258220b17cb9efcf91bda86f27e7219f2f845a87fa782e50ecf
- SSDEEP
  
  6144:KyH7xOc6H5c6HcT66vlmneTEyz4Y+kh6wHfta4FSzAfPbIa:KaVz4C6IHfPbH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2