ebb7496b7a3472c0cf9ac2b5a9c01ecbfe1fb3f62d29bac95a9266de6bd15a22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e3bf1aa69a05dexeexeexeex.exe
Size

42KB
Sample

230705-tvmwnafe5z
MD5

0e3bf1aa69a05d13862707e434be477f
SHA1

6c90c968fb8eeac972e080bc474d31336535a58f
SHA256

ebb7496b7a3472c0cf9ac2b5a9c01ecbfe1fb3f62d29bac95a9266de6bd15a22
SHA512

d77c983c9ae33aff76de2d1d21fb80a2a543386cf56a7a620cde45237f0a686250834935b056cf770dab26dc3e0735d00632fc3e21424851715c8b93a4fd9aaf
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVajSKm5uzOH7c/T:X6QFElP6n+gJQMOtEvwDpjBcSKm5uGcr

Score

7^/10

Malware Config

Targets

- Target
  
  0e3bf1aa69a05dexeexeexeex.exe
- Size
  
  42KB
- MD5
  
  0e3bf1aa69a05d13862707e434be477f
- SHA1
  
  6c90c968fb8eeac972e080bc474d31336535a58f
- SHA256
  
  ebb7496b7a3472c0cf9ac2b5a9c01ecbfe1fb3f62d29bac95a9266de6bd15a22
- SHA512
  
  d77c983c9ae33aff76de2d1d21fb80a2a543386cf56a7a620cde45237f0a686250834935b056cf770dab26dc3e0735d00632fc3e21424851715c8b93a4fd9aaf
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVajSKm5uzOH7c/T:X6QFElP6n+gJQMOtEvwDpjBcSKm5uGcr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2