1ecdef8d9d73a42b903ff61ca6aefa5236edbbeb2ea40cae34e96373c57dd899 | Triage

Sharing

General

Target

1ecdef8d9d73a42b903ff61ca6aefa5236edbbeb2ea40cae34e96373c57dd899
Size

205KB
Sample

230607-wyck7seb84
MD5

7e4b838c4949f52ef12e48b86f7dc879
SHA1

a43aae530b27401b76226e4ce80ed35b044e54ff
SHA256

1ecdef8d9d73a42b903ff61ca6aefa5236edbbeb2ea40cae34e96373c57dd899
SHA512

922ba1e682d79c45e0337f20016ad9c0d4594f58c6149d60ad63f480ff3ee4b2ff9dc9b76cac94b06ea9bf6d03958311affb261bb8fabc3e283fa099ac0b14cf
SSDEEP

3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score

7^/10

Malware Config

Targets

- Target
  
  1ecdef8d9d73a42b903ff61ca6aefa5236edbbeb2ea40cae34e96373c57dd899
- Size
  
  205KB
- MD5
  
  7e4b838c4949f52ef12e48b86f7dc879
- SHA1
  
  a43aae530b27401b76226e4ce80ed35b044e54ff
- SHA256
  
  1ecdef8d9d73a42b903ff61ca6aefa5236edbbeb2ea40cae34e96373c57dd899
- SHA512
  
  922ba1e682d79c45e0337f20016ad9c0d4594f58c6149d60ad63f480ff3ee4b2ff9dc9b76cac94b06ea9bf6d03958311affb261bb8fabc3e283fa099ac0b14cf
- SSDEEP
  
  3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1