e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

e3500312be...c2.exe

windows7-x64

7

e3500312be...c2.exe

windows10-2004-x64

7

Sharing

General

Target

e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2
Size

2.6MB
Sample

240417-zspv5afc3s
MD5

55f2ac98ecaf89e0d3b770704951de97
SHA1

a810a392ff8300b2299082fbc87a172948ce0ee7
SHA256

e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2
SHA512

c19c961b919685e8fc1373b7afcfaa65561234bc3ba29cae3d8c424c83f521e8bf6a2b9e4db6cc98737dbe56054a050a6559eb2354c809d134d64bceb344bef0
SSDEEP

49152:/74QjRFxhHmPJhtG6ToOKK6j+BpriB55IKNdyVTvKSRr42/rTmJ7kgRgOP:UUFdKdBpriH5IkyVTCZ2OhkgT

Score

7^/10

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2.exe

Resource

win7-20240221-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2
- Size
  
  2.6MB
- MD5
  
  55f2ac98ecaf89e0d3b770704951de97
- SHA1
  
  a810a392ff8300b2299082fbc87a172948ce0ee7
- SHA256
  
  e3500312be49cde8dce63a9dbae27b94a8d739b79b6ddf0a395f62e81c6870c2
- SHA512
  
  c19c961b919685e8fc1373b7afcfaa65561234bc3ba29cae3d8c424c83f521e8bf6a2b9e4db6cc98737dbe56054a050a6559eb2354c809d134d64bceb344bef0
- SSDEEP
  
  49152:/74QjRFxhHmPJhtG6ToOKK6j+BpriB55IKNdyVTvKSRr42/rTmJ7kgRgOP:UUFdKdBpriH5IkyVTCZ2OhkgT
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.