ee325affc2c953d739ca5bc4894af3835bd3207ced8dc63456d59e99b1e8fd77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee325affc2c953d739ca5bc4894af3835bd3207ced8dc63456d59e99b1e8fd77
Size

196KB
Sample

221107-gra2gabee6
MD5

051b338cb6f5fb40649dbbebcfc1e0d0
SHA1

d647af54f7bcc6990cdc0ab995eda7fb764e9607
SHA256

ee325affc2c953d739ca5bc4894af3835bd3207ced8dc63456d59e99b1e8fd77
SHA512

39f149eea353553ce35c6441d77e2d257ea575d0eef99efb71a1dcbba5203f202f6b65b8ff161029dbf6a5c935b4b93d9a52e5ca54d72113854095eb22f94669
SSDEEP

3072:aM65zTN7RH9Avf03fpp0dL5qxpubZyejITv9fXFg1:1mTNJ0f03Bp0dLiobP+v9fVa

Score

7^/10

Malware Config

Targets

- Target
  
  ee325affc2c953d739ca5bc4894af3835bd3207ced8dc63456d59e99b1e8fd77
- Size
  
  196KB
- MD5
  
  051b338cb6f5fb40649dbbebcfc1e0d0
- SHA1
  
  d647af54f7bcc6990cdc0ab995eda7fb764e9607
- SHA256
  
  ee325affc2c953d739ca5bc4894af3835bd3207ced8dc63456d59e99b1e8fd77
- SHA512
  
  39f149eea353553ce35c6441d77e2d257ea575d0eef99efb71a1dcbba5203f202f6b65b8ff161029dbf6a5c935b4b93d9a52e5ca54d72113854095eb22f94669
- SSDEEP
  
  3072:aM65zTN7RH9Avf03fpp0dL5qxpubZyejITv9fXFg1:1mTNJ0f03Bp0dLiobP+v9fVa
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2