49ce4b14fea47ab92e5ce5cd79ed55305da5b2d9aef4a5ce11fbf6ba246a2b05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7d0b1787175d9exeexeexeex.exe
Size

327KB
Sample

230711-h5m4mafa54
MD5

e7d0b1787175d9aaa4ca2da4528a67b3
SHA1

2c45829a9316f7568ddcf30ddf6af1e8406dac89
SHA256

49ce4b14fea47ab92e5ce5cd79ed55305da5b2d9aef4a5ce11fbf6ba246a2b05
SHA512

a5c4f1ceb21de86ae7f67feeacb3691a07a33b2849cca89b7f146cd3f4e8ca2148d40b5283e6022d42335d224d8e6d0b64f195d92b3709c809397098247a1c7c
SSDEEP

6144:62+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:62TFafJiHCWBWPMjVWrXK0

Score

7^/10

Malware Config

Targets

- Target
  
  e7d0b1787175d9exeexeexeex.exe
- Size
  
  327KB
- MD5
  
  e7d0b1787175d9aaa4ca2da4528a67b3
- SHA1
  
  2c45829a9316f7568ddcf30ddf6af1e8406dac89
- SHA256
  
  49ce4b14fea47ab92e5ce5cd79ed55305da5b2d9aef4a5ce11fbf6ba246a2b05
- SHA512
  
  a5c4f1ceb21de86ae7f67feeacb3691a07a33b2849cca89b7f146cd3f4e8ca2148d40b5283e6022d42335d224d8e6d0b64f195d92b3709c809397098247a1c7c
- SSDEEP
  
  6144:62+JS2sFafI8U0obHCW/2a7XQcsPMjVWrG8KgbPzDh:62TFafJiHCWBWPMjVWrXK0
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2