eafe873a74b95354fc5d4856cd54a504a13e4ec3a7020066a88d37a1d2333a1f | Triage

Sharing

General

Target

eafe873a74b95354fc5d4856cd54a504a13e4ec3a7020066a88d37a1d2333a1f
Size

9KB
Sample

221127-ezvdzahf56
MD5

f7524d38880fd8c20f23ac5eae3a2f6c
SHA1

6f34ff66a42d400ded1d36b11469550d3214eaf7
SHA256

eafe873a74b95354fc5d4856cd54a504a13e4ec3a7020066a88d37a1d2333a1f
SHA512

50e7170e471f6766c51612575527389bc0ae7ee1431adb95c5545db7239b60a68d9f8d0185806a1e047370e4fbc71269e54cf57ee2d2b464b8d5b76614856aa4
SSDEEP

192:KssqSl5CFwVFggqhv24mwNc3Zi10USOeSUrKIVO+Pf0WBFgkTLXHvBlC48Jx:q5CFwLgFhO4lVqfOMO+Pf0WBFvHZX8

Score

7^/10

Malware Config

Targets

- Target
  
  FlashPlayer_16.0.exe
- Size
  
  21KB
- MD5
  
  d4c1eb69d301dc66f44fc2bca34432a8
- SHA1
  
  902a230fedf8b49f8da4d5903abb720d78f6aa38
- SHA256
  
  e194bc38c897b530442cab58e01b213ff3cf568ca8f8ea3835a8ae567f7b3321
- SHA512
  
  5fadee0a210517a4bdf0827c591e9c764e0ad4c9963797e0a9d140cf14e2f0a542b949d2caff5883112aa339657423632735e7f46ce2d5c1355481f797b25b6e
- SSDEEP
  
  384:2b4Ejvk96uLq5NrrrrsU5UrtvP0aK3gqyJg9+XqvOZY5WuNaCVnm:C4E+q5hQ1xRqvgYpm
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2