1b79a12ae5e9ed524d7a0da7e0a8d1978c89d1d44382279a7a28f64344363759 | Triage

Sharing

General

Target

1b79a12ae5e9ed524d7a0da7e0a8d1978c89d1d44382279a7a28f64344363759N.exe
Size

55KB
Sample

241130-fxgwjatqhv
MD5

60643aa50bfa5eb8efe1bfe940570610
SHA1

329ee0ace6bc2d57f92cd1a02913b856256fc600
SHA256

1b79a12ae5e9ed524d7a0da7e0a8d1978c89d1d44382279a7a28f64344363759
SHA512

e1810319dce585810bcc699181c80ca9772a9e0d81bdb0d4fa170811d97937b9c1ad9f42d0b544d9636ac0f02630fa223e3428a2f458d038985cea817aad4530
SSDEEP

384:cnwR2F5SMtoLIYi4aYiyYNHsbDAez7Nu6NMVvz3g3hNAbhNp8U:KwR1pjiy4Rez7Nuxhj

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  1b79a12ae5e9ed524d7a0da7e0a8d1978c89d1d44382279a7a28f64344363759N.exe
- Size
  
  55KB
- MD5
  
  60643aa50bfa5eb8efe1bfe940570610
- SHA1
  
  329ee0ace6bc2d57f92cd1a02913b856256fc600
- SHA256
  
  1b79a12ae5e9ed524d7a0da7e0a8d1978c89d1d44382279a7a28f64344363759
- SHA512
  
  e1810319dce585810bcc699181c80ca9772a9e0d81bdb0d4fa170811d97937b9c1ad9f42d0b544d9636ac0f02630fa223e3428a2f458d038985cea817aad4530
- SSDEEP
  
  384:cnwR2F5SMtoLIYi4aYiyYNHsbDAez7Nu6NMVvz3g3hNAbhNp8U:KwR1pjiy4Rez7Nuxhj
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2