8028313f8ccc23c6cb1b07927d5e3a5e5aff66f36f2ce67be49cb96372722d76 | Triage

Resubmissions

24-01-2025 23:14

250124-27yspavnbr 7

24-01-2025 23:02

250124-21dtyavkap 10

19-01-2025 16:29

250119-tzgv7swkcv 10

Sharing

General

Target

FiveMHackV2.exe
Size

26.2MB
Sample

250124-27yspavnbr
MD5

0a80c7be4e77b4b2f9e580c26a0b5d13
SHA1

7525eaf2118d893c6a73fa5471f6adea4e75e164
SHA256

8028313f8ccc23c6cb1b07927d5e3a5e5aff66f36f2ce67be49cb96372722d76
SHA512

362cb3f5306cb978bc7d8e7240023c9f859a9907a07b03df4756ea48b02c0b68ddf751719b13027bd2447d9b2d1d598e210c744c4b4e1bcc11d9d17b783a1169
SSDEEP

786432:SKP9F8JjEdm7SJtWqwkd7q+XlR43OnDgUd4Z+c:P7qEdm7SHWqwGxXX43cDgUd4ZV

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  FiveMHackV2.exe
- Size
  
  26.2MB
- MD5
  
  0a80c7be4e77b4b2f9e580c26a0b5d13
- SHA1
  
  7525eaf2118d893c6a73fa5471f6adea4e75e164
- SHA256
  
  8028313f8ccc23c6cb1b07927d5e3a5e5aff66f36f2ce67be49cb96372722d76
- SHA512
  
  362cb3f5306cb978bc7d8e7240023c9f859a9907a07b03df4756ea48b02c0b68ddf751719b13027bd2447d9b2d1d598e210c744c4b4e1bcc11d9d17b783a1169
- SSDEEP
  
  786432:SKP9F8JjEdm7SJtWqwkd7q+XlR43OnDgUd4Z+c:P7qEdm7SHWqwGxXX43cDgUd4ZV
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

Software Discovery

Security Software Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2