6e3640a021cdeecaaac47b3185172d426335ff8a8cb4363afbdf88c42cac6d7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e3640a021cdeecaaac47b3185172d426335ff8a8cb4363afbdf88c42cac6d7e
Size

684KB
Sample

221107-hc8jvscec6
MD5

042bbb4926e06b7c68fec3497e290480
SHA1

e854eec18d23c4e061cf03ca7e75b71f556728cf
SHA256

6e3640a021cdeecaaac47b3185172d426335ff8a8cb4363afbdf88c42cac6d7e
SHA512

45a506df028e47c8ed12e1ab4e8409b313f1e0689243213eee78afbc1492562d6aaa8db668ec5c0b038f94c6307fd7a62dd8f73766978eb4e7887fd6d928a6b0
SSDEEP

12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y

Score

8^/10

Malware Config

Targets

- Target
  
  6e3640a021cdeecaaac47b3185172d426335ff8a8cb4363afbdf88c42cac6d7e
- Size
  
  684KB
- MD5
  
  042bbb4926e06b7c68fec3497e290480
- SHA1
  
  e854eec18d23c4e061cf03ca7e75b71f556728cf
- SHA256
  
  6e3640a021cdeecaaac47b3185172d426335ff8a8cb4363afbdf88c42cac6d7e
- SHA512
  
  45a506df028e47c8ed12e1ab4e8409b313f1e0689243213eee78afbc1492562d6aaa8db668ec5c0b038f94c6307fd7a62dd8f73766978eb4e7887fd6d928a6b0
- SSDEEP
  
  12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2