4ee3f2628eeb00c8dfc9f7c057002255b3cedb829dedece38fe702999dba5468 | Triage

Sharing

General

Target

4ee3f2628eeb00c8dfc9f7c057002255b3cedb829dedece38fe702999dba5468
Size

85KB
Sample

221011-em43mseaam
MD5

7c1727b3bd518668fa4a6c333e7f9137
SHA1

3f0b92263cfdaa67c05cf6f4be445df954eb36bc
SHA256

4ee3f2628eeb00c8dfc9f7c057002255b3cedb829dedece38fe702999dba5468
SHA512

1b849b75b93e9442fd98bbd91a58a81df984161e1a7182fb2a6dd6a3b0a9856cffcb6646f07aaa55ecd7604e72d151f7a488a4787748bbbfaea1a8d5c3467711
SSDEEP

1536:AeXLSNZSOyFmxewor4ZXkl3CkSRpliHyPm:LutyMfVxIyLiS

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  4ee3f2628eeb00c8dfc9f7c057002255b3cedb829dedece38fe702999dba5468
- Size
  
  85KB
- MD5
  
  7c1727b3bd518668fa4a6c333e7f9137
- SHA1
  
  3f0b92263cfdaa67c05cf6f4be445df954eb36bc
- SHA256
  
  4ee3f2628eeb00c8dfc9f7c057002255b3cedb829dedece38fe702999dba5468
- SHA512
  
  1b849b75b93e9442fd98bbd91a58a81df984161e1a7182fb2a6dd6a3b0a9856cffcb6646f07aaa55ecd7604e72d151f7a488a4787748bbbfaea1a8d5c3467711
- SSDEEP
  
  1536:AeXLSNZSOyFmxewor4ZXkl3CkSRpliHyPm:LutyMfVxIyLiS
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2