84eab909f82faee80e23b5e6bacbac7826486eea7ac68ccfcb6a4f5ec7b7c7dc | Triage

Sharing

General

Target

84eab909f82faee80e23b5e6bacbac7826486eea7ac68ccfcb6a4f5ec7b7c7dc.exe
Size

50KB
Sample

241119-nm4ljsvgja
MD5

52f511006e438c16e55adeb2c9d80202
SHA1

4f73d7246e6985a2520602ed425455dedc1034bb
SHA256

84eab909f82faee80e23b5e6bacbac7826486eea7ac68ccfcb6a4f5ec7b7c7dc
SHA512

12e562954c2289995df917c02d3c27967f2d407107313ebde8648b0513295d82d2e865504448a8b5552444a452018a79fb7a21ca6269dd85801afddc085a0f29
SSDEEP

768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzEMn:MAaEJlosh7pWezEPJgn

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  84eab909f82faee80e23b5e6bacbac7826486eea7ac68ccfcb6a4f5ec7b7c7dc.exe
- Size
  
  50KB
- MD5
  
  52f511006e438c16e55adeb2c9d80202
- SHA1
  
  4f73d7246e6985a2520602ed425455dedc1034bb
- SHA256
  
  84eab909f82faee80e23b5e6bacbac7826486eea7ac68ccfcb6a4f5ec7b7c7dc
- SHA512
  
  12e562954c2289995df917c02d3c27967f2d407107313ebde8648b0513295d82d2e865504448a8b5552444a452018a79fb7a21ca6269dd85801afddc085a0f29
- SSDEEP
  
  768:MApQr0zvdFJI34iGxusOy9Rp1pLeAxoeC48PqK1OtaP6cCFzEMn:MAaEJlosh7pWezEPJgn
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2