da16eff2fdabb502f53ac91f592b02cb8da89332a25042ae02bc93d54386ba0b | Triage

Sharing

General

Target

da16eff2fdabb502f53ac91f592b02cb8da89332a25042ae02bc93d54386ba0b.exe
Size

16KB
Sample

241121-krdddazepf
MD5

9a1bbb8e089cd8b029c45610587d3119
SHA1

fc5f0e156a4e076387cf7457e05ae4935dae76e1
SHA256

da16eff2fdabb502f53ac91f592b02cb8da89332a25042ae02bc93d54386ba0b
SHA512

f1c9016690956b2bdb5f2ed73046f403814805f2ad4aca9c37fd7474d8f2eeaa26f7cb88726020b595bc3297af22bde00beb35a8d4ccbd3cb4b03e936b6b9d96
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY/w9U4q3:hDXWipuE+K3/SSHgxm/KU53

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  da16eff2fdabb502f53ac91f592b02cb8da89332a25042ae02bc93d54386ba0b.exe
- Size
  
  16KB
- MD5
  
  9a1bbb8e089cd8b029c45610587d3119
- SHA1
  
  fc5f0e156a4e076387cf7457e05ae4935dae76e1
- SHA256
  
  da16eff2fdabb502f53ac91f592b02cb8da89332a25042ae02bc93d54386ba0b
- SHA512
  
  f1c9016690956b2bdb5f2ed73046f403814805f2ad4aca9c37fd7474d8f2eeaa26f7cb88726020b595bc3297af22bde00beb35a8d4ccbd3cb4b03e936b6b9d96
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY/w9U4q3:hDXWipuE+K3/SSHgxm/KU53
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2