02eacbc3cf9ffe8192d1179d86c2da2c9b682c4b27b4df3cfc298708f57354e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02eacbc3cf9ffe8192d1179d86c2da2c9b682c4b27b4df3cfc298708f57354e7
Size

95KB
Sample

240329-vsww8adc8v
MD5

e29d7bd01872a9267160a07e72134b61
SHA1

3c60db071846b554266757dc0fb5b1d3dcd4e795
SHA256

02eacbc3cf9ffe8192d1179d86c2da2c9b682c4b27b4df3cfc298708f57354e7
SHA512

3e8b30720b6ebdd8777cbf7472ddcf24dcf7f747cf459647b4b8207cfa30c16fb4323e3386bba7ec2b85348de420545121e0e59bcc4e94d6334b930d7cb16a3e
SSDEEP

1536:eAapJlQsh7pWezEPJK+U9LMeJb+BwJSK2l+EuWj9:EJlQsweAxK7yeiGGAWZ

Score

7^/10

Malware Config

Targets

- Target
  
  02eacbc3cf9ffe8192d1179d86c2da2c9b682c4b27b4df3cfc298708f57354e7
- Size
  
  95KB
- MD5
  
  e29d7bd01872a9267160a07e72134b61
- SHA1
  
  3c60db071846b554266757dc0fb5b1d3dcd4e795
- SHA256
  
  02eacbc3cf9ffe8192d1179d86c2da2c9b682c4b27b4df3cfc298708f57354e7
- SHA512
  
  3e8b30720b6ebdd8777cbf7472ddcf24dcf7f747cf459647b4b8207cfa30c16fb4323e3386bba7ec2b85348de420545121e0e59bcc4e94d6334b930d7cb16a3e
- SSDEEP
  
  1536:eAapJlQsh7pWezEPJK+U9LMeJb+BwJSK2l+EuWj9:EJlQsweAxK7yeiGGAWZ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2