Overview

overview

7

Static

static

e0a4ef63cf...1e.exe

windows7-x64

1

e0a4ef63cf...1e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0a4ef63cf6b5f38f684b7df4d7052c037707212e6c608086bc8d44f5768ac1e

  • Size

    289KB

  • Sample

    221124-e2wd2shb22

  • MD5

    abebadcbd408b974a4e7c2a2a9163d00

  • SHA1

    6aab036656bd7dd551516a57a1132eec2971dfba

  • SHA256

    e0a4ef63cf6b5f38f684b7df4d7052c037707212e6c608086bc8d44f5768ac1e

  • SHA512

    d1e4ee4ac6d2787e30baec0aa9ea961eed313b4d19ead0944bb152df732fbf3c727a3394a999fed773165a51ca78ecf8460d106cb908a91d6475e85560d558f7

  • SSDEEP

    6144:706NYAN2IsG4ll713fr70acFbca+tYkxph+i:7pNB/wj713fro1RGikxpI

Score
7/10

Malware Config

Targets

    • Target

      e0a4ef63cf6b5f38f684b7df4d7052c037707212e6c608086bc8d44f5768ac1e

    • Size

      289KB

    • MD5

      abebadcbd408b974a4e7c2a2a9163d00

    • SHA1

      6aab036656bd7dd551516a57a1132eec2971dfba

    • SHA256

      e0a4ef63cf6b5f38f684b7df4d7052c037707212e6c608086bc8d44f5768ac1e

    • SHA512

      d1e4ee4ac6d2787e30baec0aa9ea961eed313b4d19ead0944bb152df732fbf3c727a3394a999fed773165a51ca78ecf8460d106cb908a91d6475e85560d558f7

    • SSDEEP

      6144:706NYAN2IsG4ll713fr70acFbca+tYkxph+i:7pNB/wj713fro1RGikxpI

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks