e6c165937d97d26e4b8b31245e24c968c8f74b3da1de6aa8fbbbebd6b54d230f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6c165937d97d26e4b8b31245e24c968c8f74b3da1de6aa8fbbbebd6b54d230f
Size

64KB
Sample

221014-k85tysghen
MD5

73bdc8148743a35bf795785bf94b8d70
SHA1

77c02921549d2aa3e53ca9821b0ea499342f87c7
SHA256

e6c165937d97d26e4b8b31245e24c968c8f74b3da1de6aa8fbbbebd6b54d230f
SHA512

25915a3093eb35d8f91f1c9263537477f9a6043f4b7733be8dbdc048399b0ddbd802c6b1f34f289d607b4a52fea2e20b983287ecd724b7f0a9b6072da865d4e7
SSDEEP

1536:L4y9pX9WlEhainJOTBTZQ05N/ySn8i/nO7f6LpxdqwG/UVX06ACZ+aw8Gl:LxRhEF5N/ySS6j+aw8Gl

Score

8^/10

Malware Config

Targets

- Target
  
  e6c165937d97d26e4b8b31245e24c968c8f74b3da1de6aa8fbbbebd6b54d230f
- Size
  
  64KB
- MD5
  
  73bdc8148743a35bf795785bf94b8d70
- SHA1
  
  77c02921549d2aa3e53ca9821b0ea499342f87c7
- SHA256
  
  e6c165937d97d26e4b8b31245e24c968c8f74b3da1de6aa8fbbbebd6b54d230f
- SHA512
  
  25915a3093eb35d8f91f1c9263537477f9a6043f4b7733be8dbdc048399b0ddbd802c6b1f34f289d607b4a52fea2e20b983287ecd724b7f0a9b6072da865d4e7
- SSDEEP
  
  1536:L4y9pX9WlEhainJOTBTZQ05N/ySn8i/nO7f6LpxdqwG/UVX06ACZ+aw8Gl:LxRhEF5N/ySS6j+aw8Gl
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2