17b4d01d32c64a62e36496829da323fe308437048ca87143de7365fabd4194fd

Analysis

max time kernel
270s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-11-2024 03:27

Target

e6c4ae470977aa78d1005746ae05deea0bf3b4260f88865662a35f99b2559dbc_not_packed_maybe_useless.exe
Size

54KB
MD5

bc6a67d5665ccfba24c093da2a606d9d
SHA1

5bca38d447165307087df43912f4b15b43c934a2
SHA256

e6c4ae470977aa78d1005746ae05deea0bf3b4260f88865662a35f99b2559dbc
SHA512

5b25e0b84414cfe3ea35948d82274b73f1d993c2403503572fc6fb4520bfeae64ee55d014887db1667419f6847720e4b12bfc6c227f68e22d2d42f193d2ad820
SSDEEP

768:emX2MKhRw7+am7nx3h1OPG0H+l65Fuj0AjmWTbsbIK9QnjVPO1xPao1X7tiHC:egKIqamtRMPJQoh2mqxTnjVPti

Score

7^/10

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

System Information Discovery

Processes:

e6c4ae470977aa78d1005746ae05deea0bf3b4260f88865662a35f99b2559dbc_not_packed_maybe_useless.exe

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Control Panel\International\Geo\Nation	e6c4ae470977aa78d1005746ae05deea0bf3b4260f88865662a35f99b2559dbc_not_packed_maybe_useless.exe

C:\Users\Admin\AppData\Local\Temp\e6c4ae470977aa78d1005746ae05deea0bf3b4260f88865662a35f99b2559dbc_not_packed_maybe_useless.exe
"C:\Users\Admin\AppData\Local\Temp\e6c4ae470977aa78d1005746ae05deea0bf3b4260f88865662a35f99b2559dbc_not_packed_maybe_useless.exe"
1⤵
- Checks computer location settings
PID:2648

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\ProgramData\eknbmvpdzfethwr

Filesize
52B

MD5
66b7c002a32bf545f376904dd3ace72d

SHA1
fcb6cc1e36b7eb69fd856a4d33964765ec5531bc

SHA256
93f1eb4bf6cae7c277528f188524e55772328b47ff5ffded9589f61dff552a60

SHA512
99cdb8c51bb54550dae4ebd27e92c97803adff9764dd33881f3110a335748cbaea2d5e5e7d59664db823c7fefbc480c689c40bb130d878a4b69e7f5c5995c8fe

Download Submit