4ce2aa845942322218471de9d3b776dd12d04a15d5b959fffeb9d83dab524026 | Triage

Sharing

General

Target

4ce2aa845942322218471de9d3b776dd12d04a15d5b959fffeb9d83dab524026.exe
Size

15KB
Sample

241121-ldawrszgpg
MD5

19f18ab10754932bba68ab53cd71d16b
SHA1

36661fa85cbcb93a3bc8fdd9441a2f52995d1d99
SHA256

4ce2aa845942322218471de9d3b776dd12d04a15d5b959fffeb9d83dab524026
SHA512

c88fbb06014414037e4793a41e2a94782c5c44768ff00f0a334b66bcce6753961550539a43dad8d18ced04b24a9f8ca24fff57d15b55941b02ae3099c3271a63
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhvFBjM:hDXWipuE+K3/SSHgxlFBg

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  4ce2aa845942322218471de9d3b776dd12d04a15d5b959fffeb9d83dab524026.exe
- Size
  
  15KB
- MD5
  
  19f18ab10754932bba68ab53cd71d16b
- SHA1
  
  36661fa85cbcb93a3bc8fdd9441a2f52995d1d99
- SHA256
  
  4ce2aa845942322218471de9d3b776dd12d04a15d5b959fffeb9d83dab524026
- SHA512
  
  c88fbb06014414037e4793a41e2a94782c5c44768ff00f0a334b66bcce6753961550539a43dad8d18ced04b24a9f8ca24fff57d15b55941b02ae3099c3271a63
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhvFBjM:hDXWipuE+K3/SSHgxlFBg
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2