6ee5de9d9dd619f77e6d2085fe01f67d21a805cdfd07564c8b2690011f66c8fe | Triage

Sharing

General

Target

6ee5de9d9dd619f77e6d2085fe01f67d21a805cdfd07564c8b2690011f66c8fe
Size

160KB
Sample

221107-xafhmaeehn
MD5

0b4054c9aca2309def60082c02a795bf
SHA1

d83b3afa3b13304635ad6aa81e62ffc8bf7d6932
SHA256

6ee5de9d9dd619f77e6d2085fe01f67d21a805cdfd07564c8b2690011f66c8fe
SHA512

00fd93faca2572030b89e7df7a33cb962b72f724bf66f5d2ee303bc7cc09292b30ed7d833af36ffbe89d96e8f4176a5b8b2459741925892d0322792a84e075c6
SSDEEP

3072:8sDV6Az1YWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQAzgFvYGJd6KpZV3uTN9WU/G9h2w59X

Score

7^/10

Malware Config

Targets

- Target
  
  6ee5de9d9dd619f77e6d2085fe01f67d21a805cdfd07564c8b2690011f66c8fe
- Size
  
  160KB
- MD5
  
  0b4054c9aca2309def60082c02a795bf
- SHA1
  
  d83b3afa3b13304635ad6aa81e62ffc8bf7d6932
- SHA256
  
  6ee5de9d9dd619f77e6d2085fe01f67d21a805cdfd07564c8b2690011f66c8fe
- SHA512
  
  00fd93faca2572030b89e7df7a33cb962b72f724bf66f5d2ee303bc7cc09292b30ed7d833af36ffbe89d96e8f4176a5b8b2459741925892d0322792a84e075c6
- SSDEEP
  
  3072:8sDV6Az1YWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQAzgFvYGJd6KpZV3uTN9WU/G9h2w59X
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2