ee010f0b2d9afa2a1def8e1d899c1e0afb44041545af91d227e6997e852f08cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee010f0b2d9afa2a1def8e1d899c1e0afb44041545af91d227e6997e852f08cd
Size

1.9MB
Sample

220918-f27bzsefhm
MD5

05be41a9d7db52cda0f3e87d2f35af10
SHA1

f6f435c45e1e859447f29763d77916c6e81b4f3e
SHA256

ee010f0b2d9afa2a1def8e1d899c1e0afb44041545af91d227e6997e852f08cd
SHA512

72c9a38fb415b61a47c4bce65ce226acbc4672bc7fa26464097fe91f50e418c7ef9ec083752455e1978fc59a688b7449c522b73f7da312ebe2f4d4de79c88eda
SSDEEP

49152:I/oSqeAryzWTIc99lvfJvK31SqyOxE3zAzLj:I/o4AryCTIc9vfM1SJ30fj

Score

7^/10

Malware Config

Targets

- Target
  
  ee010f0b2d9afa2a1def8e1d899c1e0afb44041545af91d227e6997e852f08cd
- Size
  
  1.9MB
- MD5
  
  05be41a9d7db52cda0f3e87d2f35af10
- SHA1
  
  f6f435c45e1e859447f29763d77916c6e81b4f3e
- SHA256
  
  ee010f0b2d9afa2a1def8e1d899c1e0afb44041545af91d227e6997e852f08cd
- SHA512
  
  72c9a38fb415b61a47c4bce65ce226acbc4672bc7fa26464097fe91f50e418c7ef9ec083752455e1978fc59a688b7449c522b73f7da312ebe2f4d4de79c88eda
- SSDEEP
  
  49152:I/oSqeAryzWTIc99lvfJvK31SqyOxE3zAzLj:I/o4AryCTIc9vfM1SJ30fj
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1