ef0e9171dd87eeb2ff6b0cb95a2f8c133a06bcc1c8011c6b24ab0b6db604b7c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef0e9171dd87eeb2ff6b0cb95a2f8c133a06bcc1c8011c6b24ab0b6db604b7c5
Size

24KB
Sample

240415-e1b9saha2w
MD5

f669551af0d34d69f99845b3d0449b9c
SHA1

06d3c5e7bf0f3198a627bd6db3ee33e906e07943
SHA256

ef0e9171dd87eeb2ff6b0cb95a2f8c133a06bcc1c8011c6b24ab0b6db604b7c5
SHA512

a8cd75dfab92d9084c65f9a93407e42ca383232faf98cfee9c25f2d1a9a2ff2be469bc837d4219acf1d4ec55d31853e234e819b851771161d4639a6a1ba2ae1c
SSDEEP

384:RgnwR2Q1N8J1r1P/84z0rfvyTLthw89K4SoIK:RmwRC1383r3yNi8LIK

Score

7^/10

Malware Config

Targets

- Target
  
  ef0e9171dd87eeb2ff6b0cb95a2f8c133a06bcc1c8011c6b24ab0b6db604b7c5
- Size
  
  24KB
- MD5
  
  f669551af0d34d69f99845b3d0449b9c
- SHA1
  
  06d3c5e7bf0f3198a627bd6db3ee33e906e07943
- SHA256
  
  ef0e9171dd87eeb2ff6b0cb95a2f8c133a06bcc1c8011c6b24ab0b6db604b7c5
- SHA512
  
  a8cd75dfab92d9084c65f9a93407e42ca383232faf98cfee9c25f2d1a9a2ff2be469bc837d4219acf1d4ec55d31853e234e819b851771161d4639a6a1ba2ae1c
- SSDEEP
  
  384:RgnwR2Q1N8J1r1P/84z0rfvyTLthw89K4SoIK:RmwRC1383r3yNi8LIK
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2