3fec26c0ad0c55c3b8a6a826d7295a247430a52dbdad449b320ac5faa20c8e22 | Triage

Sharing

General

Target

3fec26c0ad0c55c3b8a6a826d7295a247430a52dbdad449b320ac5faa20c8e22.exe
Size

14KB
Sample

241121-gw3bhsyrex
MD5

5cd1d5b8f786eb4ba2ae3fe6e9f0ebca
SHA1

1ebb1afd096a1c9acd348a440c1582cd7d056215
SHA256

3fec26c0ad0c55c3b8a6a826d7295a247430a52dbdad449b320ac5faa20c8e22
SHA512

d3e56168070b3fb8624fdb8a8188aece82700793a4a8d50383193d45f9558eb27f7fc6b3e8b38935a4228e7565594698ba06a09bc9435197afd355aa7b1bd954
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0JSs:hDXWipuE+K3/SSHgx4ws

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  3fec26c0ad0c55c3b8a6a826d7295a247430a52dbdad449b320ac5faa20c8e22.exe
- Size
  
  14KB
- MD5
  
  5cd1d5b8f786eb4ba2ae3fe6e9f0ebca
- SHA1
  
  1ebb1afd096a1c9acd348a440c1582cd7d056215
- SHA256
  
  3fec26c0ad0c55c3b8a6a826d7295a247430a52dbdad449b320ac5faa20c8e22
- SHA512
  
  d3e56168070b3fb8624fdb8a8188aece82700793a4a8d50383193d45f9558eb27f7fc6b3e8b38935a4228e7565594698ba06a09bc9435197afd355aa7b1bd954
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0JSs:hDXWipuE+K3/SSHgx4ws
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2