ecab545a4aa3dc658de5d77bfbb704509e0fd43da9ff8183234cafd2ea56cdbb | Triage

Sharing

General

Target

ecab545a4aa3dc658de5d77bfbb704509e0fd43da9ff8183234cafd2ea56cdbb
Size

208KB
Sample

221125-1ahvjabb3v
MD5

b3804d4e48455b8f224ace24bbeb02b9
SHA1

fcb892e348f022f61c276190e757068d7c678982
SHA256

ecab545a4aa3dc658de5d77bfbb704509e0fd43da9ff8183234cafd2ea56cdbb
SHA512

3dbee52d34447aa0700936dcb0ee275f19157b13f9161f0140adc18dbffea178c64bf954790c634c64fdfb4f818155e33d6926f01f50a862a83edc34c6be7b7f
SSDEEP

6144:QJAmr43RNiyAkPrzDUDQsESu03LvaW1zU:Qemr4BkjkI0sEl03LyWO

Score

8^/10

Malware Config

Targets

- Target
  
  ecab545a4aa3dc658de5d77bfbb704509e0fd43da9ff8183234cafd2ea56cdbb
- Size
  
  208KB
- MD5
  
  b3804d4e48455b8f224ace24bbeb02b9
- SHA1
  
  fcb892e348f022f61c276190e757068d7c678982
- SHA256
  
  ecab545a4aa3dc658de5d77bfbb704509e0fd43da9ff8183234cafd2ea56cdbb
- SHA512
  
  3dbee52d34447aa0700936dcb0ee275f19157b13f9161f0140adc18dbffea178c64bf954790c634c64fdfb4f818155e33d6926f01f50a862a83edc34c6be7b7f
- SSDEEP
  
  6144:QJAmr43RNiyAkPrzDUDQsESu03LvaW1zU:Qemr4BkjkI0sEl03LyWO
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2