76286d890a070e13af22b0f048fb6f15c76f9c203de7a65fc87d3276db2ffbb8 | Triage

Sharing

General

Target

76286d890a070e13af22b0f048fb6f15c76f9c203de7a65fc87d3276db2ffbb8.exe
Size

38KB
Sample

250120-k4w19asjat
MD5

b3013fc90fcc10c1fc474e77acebcd2a
SHA1

407d6b637773c1bf84291bbfc883394de45c49a0
SHA256

76286d890a070e13af22b0f048fb6f15c76f9c203de7a65fc87d3276db2ffbb8
SHA512

0798c0594d0669fea038d67234eb91e8f54dbd1c411d737bbe09d3a4a5ab353b200641d3be0e6ec920fc45784d50aff779c94a1dbf42599c52ba5ef95640010c
SSDEEP

384:MApc8m4e0GvQak4JI341C0abnk6hJP+wMv:MApQr0GvdFJI34qTk6hJPIv

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  76286d890a070e13af22b0f048fb6f15c76f9c203de7a65fc87d3276db2ffbb8.exe
- Size
  
  38KB
- MD5
  
  b3013fc90fcc10c1fc474e77acebcd2a
- SHA1
  
  407d6b637773c1bf84291bbfc883394de45c49a0
- SHA256
  
  76286d890a070e13af22b0f048fb6f15c76f9c203de7a65fc87d3276db2ffbb8
- SHA512
  
  0798c0594d0669fea038d67234eb91e8f54dbd1c411d737bbe09d3a4a5ab353b200641d3be0e6ec920fc45784d50aff779c94a1dbf42599c52ba5ef95640010c
- SSDEEP
  
  384:MApc8m4e0GvQak4JI341C0abnk6hJP+wMv:MApQr0GvdFJI34qTk6hJPIv
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2