c8c9f4eff42a18309d0aee8589644d2c54060171e029801259a8a136a19c4910 | Triage

Sharing

General

Target

c8c9f4eff42a18309d0aee8589644d2c54060171e029801259a8a136a19c4910N.exe
Size

39KB
Sample

250120-kyhxfa1phz
MD5

8d806fb64d594970cbe712bbc06f8620
SHA1

b0d07d467612c82660bae118fe20400a33ed3935
SHA256

c8c9f4eff42a18309d0aee8589644d2c54060171e029801259a8a136a19c4910
SHA512

9accc0bea950071fcb587da0c303694aa92843c34fd0ea78c343f1323efb1ab67bc18c68d2ee44cd2607ff9f83613ea73883c1e90c0fc69434b06e636ddfc989
SSDEEP

768:mzQL/qXL7g5AQRBIFGEjvM0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGWl:mUL/o7EjR2I0WtdgI2MyzNORQtOflIw7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c8c9f4eff42a18309d0aee8589644d2c54060171e029801259a8a136a19c4910N.exe
- Size
  
  39KB
- MD5
  
  8d806fb64d594970cbe712bbc06f8620
- SHA1
  
  b0d07d467612c82660bae118fe20400a33ed3935
- SHA256
  
  c8c9f4eff42a18309d0aee8589644d2c54060171e029801259a8a136a19c4910
- SHA512
  
  9accc0bea950071fcb587da0c303694aa92843c34fd0ea78c343f1323efb1ab67bc18c68d2ee44cd2607ff9f83613ea73883c1e90c0fc69434b06e636ddfc989
- SSDEEP
  
  768:mzQL/qXL7g5AQRBIFGEjvM0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGWl:mUL/o7EjR2I0WtdgI2MyzNORQtOflIw7
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2