efbbf54bc486cff0a0ee6208376ed807fa3e6e0a63d38c17848b712ba6dff7eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05cae3ea153097exeexeexeex.exe
Size

288KB
Sample

230705-sjs3vseg8v
MD5

05cae3ea15309734841f462b03d146f1
SHA1

4e086d09d143380b7d4d41e104bba8ca4a7b795e
SHA256

efbbf54bc486cff0a0ee6208376ed807fa3e6e0a63d38c17848b712ba6dff7eb
SHA512

6c43886a6a460538890f11799b7b1d3be0326b5f8a582eb1c80cff89dbfa2e605e9721582ed5694e422ab482d0d30c6bb97a22b1364154506cc343629724c2ad
SSDEEP

6144:HQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:HQMyfmNFHfnWfhLZVHmOog

Score

7^/10

Malware Config

Targets

- Target
  
  05cae3ea153097exeexeexeex.exe
- Size
  
  288KB
- MD5
  
  05cae3ea15309734841f462b03d146f1
- SHA1
  
  4e086d09d143380b7d4d41e104bba8ca4a7b795e
- SHA256
  
  efbbf54bc486cff0a0ee6208376ed807fa3e6e0a63d38c17848b712ba6dff7eb
- SHA512
  
  6c43886a6a460538890f11799b7b1d3be0326b5f8a582eb1c80cff89dbfa2e605e9721582ed5694e422ab482d0d30c6bb97a22b1364154506cc343629724c2ad
- SSDEEP
  
  6144:HQ+Tyfx4NF67Sbq2nW82X45gc3BaLZVS0mOoC8zbzDie:HQMyfmNFHfnWfhLZVHmOog
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2