f951296a40dcaeb357ef910ef309a883235ef584bd31c30cc8558eeb9d762485 | Triage

Sharing

General

Target

f951296a40dcaeb357ef910ef309a883235ef584bd31c30cc8558eeb9d762485.exe
Size

14KB
Sample

241121-n93mrswpej
MD5

34a364436280475d702682b1030747c3
SHA1

1266b780c30ac13b3dd45141984ec4311ddce655
SHA256

f951296a40dcaeb357ef910ef309a883235ef584bd31c30cc8558eeb9d762485
SHA512

52c9251e7475370305599c38b086b5ffe24e0458ea68f692e0b1a57895ed68edc27a91707cf4b9d4b70915b0eb1352092981eb819de4cb40d99b0c6765cbd119
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0DcAv:hDXWipuE+K3/SSHgx4rv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  f951296a40dcaeb357ef910ef309a883235ef584bd31c30cc8558eeb9d762485.exe
- Size
  
  14KB
- MD5
  
  34a364436280475d702682b1030747c3
- SHA1
  
  1266b780c30ac13b3dd45141984ec4311ddce655
- SHA256
  
  f951296a40dcaeb357ef910ef309a883235ef584bd31c30cc8558eeb9d762485
- SHA512
  
  52c9251e7475370305599c38b086b5ffe24e0458ea68f692e0b1a57895ed68edc27a91707cf4b9d4b70915b0eb1352092981eb819de4cb40d99b0c6765cbd119
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhR0DcAv:hDXWipuE+K3/SSHgx4rv
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2