eae3d0332dcc0716462442bcf042c73bc9311faac835f2ea6787603ddb4ef212 | Triage

Sharing

General

Target

eae3d0332dcc0716462442bcf042c73bc9311faac835f2ea6787603ddb4ef212
Size

1.1MB
Sample

220919-vcq12adbak
MD5

c6797c3fea1a72879050edf8a9b73fac
SHA1

8ae382242b41be4e0aca69d78b7ea1a973c5268a
SHA256

eae3d0332dcc0716462442bcf042c73bc9311faac835f2ea6787603ddb4ef212
SHA512

b9f9342cadeaf1f5a8b4b2ca67eddf327d7da5a91d072e6dab515539a4110150f0e58b63e16ff60f1f745c9476f1ec1a236a6e29b29b5bc4e72b4b6d928a9294
SSDEEP

24576:zstjcXJqrJVBpm+betD81APUqWjb7oaFtsA3fAwWHik9w:zstjcXJqlOtw7b0AtswAwZk9w

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  eae3d0332dcc0716462442bcf042c73bc9311faac835f2ea6787603ddb4ef212
- Size
  
  1.1MB
- MD5
  
  c6797c3fea1a72879050edf8a9b73fac
- SHA1
  
  8ae382242b41be4e0aca69d78b7ea1a973c5268a
- SHA256
  
  eae3d0332dcc0716462442bcf042c73bc9311faac835f2ea6787603ddb4ef212
- SHA512
  
  b9f9342cadeaf1f5a8b4b2ca67eddf327d7da5a91d072e6dab515539a4110150f0e58b63e16ff60f1f745c9476f1ec1a236a6e29b29b5bc4e72b4b6d928a9294
- SSDEEP
  
  24576:zstjcXJqrJVBpm+betD81APUqWjb7oaFtsA3fAwWHik9w:zstjcXJqlOtw7b0AtswAwZk9w
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2