dc807a2bc0a23aadeeb0f859bfb6d7638d5c169a6f4a89ace10e045df1539ec6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb4061cd99548cexeexeexeex.exe
Size

78KB
Sample

230711-jnfhwsgd9x
MD5

eb4061cd99548cf5b1d5b20ce5643cb1
SHA1

437fd1654bfc1fe9eff9d4c9582495f894273ed7
SHA256

dc807a2bc0a23aadeeb0f859bfb6d7638d5c169a6f4a89ace10e045df1539ec6
SHA512

fee9b5c58810d54ad7bb7f11dd3d7e5c619003e710caa1ca08e202b5e9ee66753f447302fc5ec83a9bd21809210820432b112b0f28e613d87486ba7dc7ecc89e
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yJVHdPvb:V6QFElP6n+gMQMOtEvwDpjyaLccVNlvJ

Score

7^/10

Malware Config

Targets

- Target
  
  eb4061cd99548cexeexeexeex.exe
- Size
  
  78KB
- MD5
  
  eb4061cd99548cf5b1d5b20ce5643cb1
- SHA1
  
  437fd1654bfc1fe9eff9d4c9582495f894273ed7
- SHA256
  
  dc807a2bc0a23aadeeb0f859bfb6d7638d5c169a6f4a89ace10e045df1539ec6
- SHA512
  
  fee9b5c58810d54ad7bb7f11dd3d7e5c619003e710caa1ca08e202b5e9ee66753f447302fc5ec83a9bd21809210820432b112b0f28e613d87486ba7dc7ecc89e
- SSDEEP
  
  768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yJVHdPvb:V6QFElP6n+gMQMOtEvwDpjyaLccVNlvJ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2