5c2efc7eccdb26a27ab0058518a074680be0c12dce9ad551092cb2cc848e0be9 | Triage

Sharing

General

Target

5c2efc7eccdb26a27ab0058518a074680be0c12dce9ad551092cb2cc848e0be9
Size

23KB
Sample

221107-ext1esgdb2
MD5

0e6ed3c9dba48efa564324493f4fabf0
SHA1

a022f9fc453f9ff3b8e637f3b4b5cca166422518
SHA256

5c2efc7eccdb26a27ab0058518a074680be0c12dce9ad551092cb2cc848e0be9
SHA512

2686be629473ee13a23a2e666e269bcf3d4b6f2de17411e4f1a77730b78c89855f455c252c10d382d3836f2b480accd0c00463d7365205abed6521b56654de70
SSDEEP

384:nN8CcBkj4bdNFP5D1aGOUUS6FGqc2RUthGIJ6rD+RO:OWj4bdHPRUS6FO2yzt6eO

Score

8^/10

Malware Config

Targets

- Target
  
  5c2efc7eccdb26a27ab0058518a074680be0c12dce9ad551092cb2cc848e0be9
- Size
  
  23KB
- MD5
  
  0e6ed3c9dba48efa564324493f4fabf0
- SHA1
  
  a022f9fc453f9ff3b8e637f3b4b5cca166422518
- SHA256
  
  5c2efc7eccdb26a27ab0058518a074680be0c12dce9ad551092cb2cc848e0be9
- SHA512
  
  2686be629473ee13a23a2e666e269bcf3d4b6f2de17411e4f1a77730b78c89855f455c252c10d382d3836f2b480accd0c00463d7365205abed6521b56654de70
- SSDEEP
  
  384:nN8CcBkj4bdNFP5D1aGOUUS6FGqc2RUthGIJ6rD+RO:OWj4bdHPRUS6FO2yzt6eO
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2