e0211ea7be0b6e9ae2776430a95bdf52e0c14115d98bad349cc3d6cab6a48331 | Triage

Sharing

General

Target

e0211ea7be0b6e9ae2776430a95bdf52e0c14115d98bad349cc3d6cab6a48331
Size

1.7MB
Sample

221123-sy8rvsff9s
MD5

21aaf4ab6682548f6e392ac2032d9e17
SHA1

dba16c84f291054af7e68c0ea67b0e3646d9eee4
SHA256

e0211ea7be0b6e9ae2776430a95bdf52e0c14115d98bad349cc3d6cab6a48331
SHA512

57c557c65b68c01ba5517c771ad27921c0054d05dfa2f3ebd87d26ec63933b3dfa4332beccfec50d3886dd211d990a09e47e54966c34f3e8463f1d275d44c0ab
SSDEEP

49152:NsaifzNM7kadHTLQAknNZTVk7H5SBDBxFryw:uZfO7ddHTLSPhqcBFxFrd

Score

7^/10

Malware Config

Targets

- Target
  
  e0211ea7be0b6e9ae2776430a95bdf52e0c14115d98bad349cc3d6cab6a48331
- Size
  
  1.7MB
- MD5
  
  21aaf4ab6682548f6e392ac2032d9e17
- SHA1
  
  dba16c84f291054af7e68c0ea67b0e3646d9eee4
- SHA256
  
  e0211ea7be0b6e9ae2776430a95bdf52e0c14115d98bad349cc3d6cab6a48331
- SHA512
  
  57c557c65b68c01ba5517c771ad27921c0054d05dfa2f3ebd87d26ec63933b3dfa4332beccfec50d3886dd211d990a09e47e54966c34f3e8463f1d275d44c0ab
- SSDEEP
  
  49152:NsaifzNM7kadHTLQAknNZTVk7H5SBDBxFryw:uZfO7ddHTLSPhqcBFxFrd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1