7eb7563004c7573c191dd7513e47e86cc9ee8dec47c8bec24c0063558ceeb032 | Triage

Sharing

General

Target

7eb7563004c7573c191dd7513e47e86cc9ee8dec47c8bec24c0063558ceeb032
Size

3.1MB
Sample

230130-y2s4gaeb8t
MD5

15909b12478e5f1c0738deb618ce4ea5
SHA1

c30a6b954397dc5e560690f05454fbd7cc3faf24
SHA256

7eb7563004c7573c191dd7513e47e86cc9ee8dec47c8bec24c0063558ceeb032
SHA512

61abc25e2049fd2e02fc5936974e45b524eb4c659a1266c0a7e8f1f0482fadbff9c81438e65844d19bfe35354edb69e7058f6530b7dd64222324a3ab3cf35b47
SSDEEP

98304:uqE/AMVObi1sndzt9cG8QNUor1DNB3a9gmOn:SjD6zJNNB3a9k

Score

8^/10

Malware Config

Targets

- Target
  
  7eb7563004c7573c191dd7513e47e86cc9ee8dec47c8bec24c0063558ceeb032
- Size
  
  3.1MB
- MD5
  
  15909b12478e5f1c0738deb618ce4ea5
- SHA1
  
  c30a6b954397dc5e560690f05454fbd7cc3faf24
- SHA256
  
  7eb7563004c7573c191dd7513e47e86cc9ee8dec47c8bec24c0063558ceeb032
- SHA512
  
  61abc25e2049fd2e02fc5936974e45b524eb4c659a1266c0a7e8f1f0482fadbff9c81438e65844d19bfe35354edb69e7058f6530b7dd64222324a3ab3cf35b47
- SSDEEP
  
  98304:uqE/AMVObi1sndzt9cG8QNUor1DNB3a9gmOn:SjD6zJNNB3a9k
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2