e0e2f848d05f98bda149f74414e2c5d4fe563617a93b0f66c2a792662b4061ae | Triage

Sharing

General

Target

e0e2f848d05f98bda149f74414e2c5d4fe563617a93b0f66c2a792662b4061ae
Size

18KB
Sample

221107-lzag5adbbl
MD5

04586c624622ff2e46660df7d2f9cff0
SHA1

5367eb02a3889654a4186693e0f91ee7dbac3374
SHA256

e0e2f848d05f98bda149f74414e2c5d4fe563617a93b0f66c2a792662b4061ae
SHA512

3abf612f128654d4e62fd1205a7231b0fcd8e70be82ba82284c6c96f733290f5acb1c50ae9de524f122ba2b190786642f4688e5568c5fb90fc7b6cc3c79bbe90
SSDEEP

192:dQW8obUyk3g9V5x3Z9E7RJprOG2MbFt1ffiTfEvkY6ppEyLBB7:VUJ38V33ZORbi3k/ffiTfEvkxEEBB7

Score

8^/10

Malware Config

Targets

- Target
  
  e0e2f848d05f98bda149f74414e2c5d4fe563617a93b0f66c2a792662b4061ae
- Size
  
  18KB
- MD5
  
  04586c624622ff2e46660df7d2f9cff0
- SHA1
  
  5367eb02a3889654a4186693e0f91ee7dbac3374
- SHA256
  
  e0e2f848d05f98bda149f74414e2c5d4fe563617a93b0f66c2a792662b4061ae
- SHA512
  
  3abf612f128654d4e62fd1205a7231b0fcd8e70be82ba82284c6c96f733290f5acb1c50ae9de524f122ba2b190786642f4688e5568c5fb90fc7b6cc3c79bbe90
- SSDEEP
  
  192:dQW8obUyk3g9V5x3Z9E7RJprOG2MbFt1ffiTfEvkY6ppEyLBB7:VUJ38V33ZORbi3k/ffiTfEvkxEEBB7
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2