5eadb8addb718cf0c4339531748a6f73f7a030acb5c0fe5165a718c156e6f299 | Triage

Sharing

General

Target

file.zip
Size

858KB
Sample

241126-jehxnaxpgk
MD5

7067bc1888afaba6f543c21821b366aa
SHA1

a20b4499573f2f6ab100d39a5c7b9d2e1ba44163
SHA256

5eadb8addb718cf0c4339531748a6f73f7a030acb5c0fe5165a718c156e6f299
SHA512

c4921efddf729cef787cb9bce13ee3ecb70c333cd37e1a79dc9db907b42508d81a0d5a35a4cd8c3b47dc43a6d00538d91a1cef9b8226988deaad904b2fd9c4e4
SSDEEP

24576:uzGCRP8y0/Lr8stCgBCAhnhHkos4bH4on8/:IbuLnh00VfDe/

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  879KB
- MD5
  
  4b1e6b39e13bf7c665e4ed51f4e49411
- SHA1
  
  2b58537f6039444ca4920245a2854f4368c9ded5
- SHA256
  
  f361f5ec213b861dc4a76eb2835d70e6739321539ad216ea5dc416c1dc026528
- SHA512
  
  c9a1d462e724c723654cb43097fe0ad6d1219c0d39a786266343d9728c9934a22e76beba923e1ca03f28b5f1c0dc21fdc85088d4eda228b369004178764532a6
- SSDEEP
  
  24576:lHcxScGuA5eXL3zjNaYgMcg9L/KC3wPRku02nwYBhX:xLgAGN3ghgRlwPRv1
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2