eeae29cef6e8fbe2a56e4f4f58cc94abe369d46eb9b4f119a03395abf196175d | Triage

Sharing

General

Target

eeae29cef6e8fbe2a56e4f4f58cc94abe369d46eb9b4f119a03395abf196175d
Size

3.4MB
Sample

221126-1153racd2z
MD5

c299b2700921a12d01736c16b824311e
SHA1

0dd5ae7a83550368275faf780d3a9b5397638deb
SHA256

eeae29cef6e8fbe2a56e4f4f58cc94abe369d46eb9b4f119a03395abf196175d
SHA512

5c8191cde807a78562118c2153a75511d0ade3787af0900d671a0bb39a4667b5e467d83de7dd2c293425c53e20f660f7a778e2dbbeeb67e97bd2e9f611c190c8
SSDEEP

98304:63BR//1E74wVxlc5/8HP0629NyTISHh1jESMuF325:6WPV2OTISH7QSrK

Score

8^/10

Malware Config

Targets

- Target
  
  eeae29cef6e8fbe2a56e4f4f58cc94abe369d46eb9b4f119a03395abf196175d
- Size
  
  3.4MB
- MD5
  
  c299b2700921a12d01736c16b824311e
- SHA1
  
  0dd5ae7a83550368275faf780d3a9b5397638deb
- SHA256
  
  eeae29cef6e8fbe2a56e4f4f58cc94abe369d46eb9b4f119a03395abf196175d
- SHA512
  
  5c8191cde807a78562118c2153a75511d0ade3787af0900d671a0bb39a4667b5e467d83de7dd2c293425c53e20f660f7a778e2dbbeeb67e97bd2e9f611c190c8
- SSDEEP
  
  98304:63BR//1E74wVxlc5/8HP0629NyTISHh1jESMuF325:6WPV2OTISH7QSrK
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2