38d3693a99b37f38a0c104050080fc3f7f0f68c82860fbfa99ed111d832f4329 | Triage

Sharing

General

Target

38d3693a99b37f38a0c104050080fc3f7f0f68c82860fbfa99ed111d832f4329N.exe
Size

24KB
Sample

241119-qp8pdsxcql
MD5

67c1d7464ec33be30dfd858f4c8b8000
SHA1

f5fbdf5071729da569626b2e10fec08b49e3c189
SHA256

38d3693a99b37f38a0c104050080fc3f7f0f68c82860fbfa99ed111d832f4329
SHA512

cd090e4ba6169b4784d61409533a7d87f2f7370d56257fc6ba01594abcb50bf660fdd95f1366b5d0fbdb8290c42cf597bd9a5ec0d07591b28fdef502c9723a3c
SSDEEP

768:RsWDqjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oqt+6d8:BDqjXRrs9sINeZEtejlIkoLN127BFVns

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  38d3693a99b37f38a0c104050080fc3f7f0f68c82860fbfa99ed111d832f4329N.exe
- Size
  
  24KB
- MD5
  
  67c1d7464ec33be30dfd858f4c8b8000
- SHA1
  
  f5fbdf5071729da569626b2e10fec08b49e3c189
- SHA256
  
  38d3693a99b37f38a0c104050080fc3f7f0f68c82860fbfa99ed111d832f4329
- SHA512
  
  cd090e4ba6169b4784d61409533a7d87f2f7370d56257fc6ba01594abcb50bf660fdd95f1366b5d0fbdb8290c42cf597bd9a5ec0d07591b28fdef502c9723a3c
- SSDEEP
  
  768:RsWDqjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oqt+6d8:BDqjXRrs9sINeZEtejlIkoLN127BFVns
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2