deeb47a40e164aa80d8a47ecd8ca6f0098ea178dd1963c6998ec725c6f1c88e6 | Triage

Sharing

General

Target

deeb47a40e164aa80d8a47ecd8ca6f0098ea178dd1963c6998ec725c6f1c88e6
Size

12KB
Sample

240606-h5er9acb34
MD5

f92077f35214c246e644f6707fba7885
SHA1

7a49a47fafb0d72f0644babb06ee1a16c112e767
SHA256

deeb47a40e164aa80d8a47ecd8ca6f0098ea178dd1963c6998ec725c6f1c88e6
SHA512

d8978819ae335600399d81cf17de1af8c1d7e06ffaba6a4be931d84ecfcde60592440664157abf62cf875da8cba34fff55753738c4af1727dd4862171d119ffe
SSDEEP

384:wL7li/2zpq2DcEQvdQcJKLTp/NK9xaUn:upMCQ9cUn

Score

7^/10

Malware Config

Targets

- Target
  
  deeb47a40e164aa80d8a47ecd8ca6f0098ea178dd1963c6998ec725c6f1c88e6
- Size
  
  12KB
- MD5
  
  f92077f35214c246e644f6707fba7885
- SHA1
  
  7a49a47fafb0d72f0644babb06ee1a16c112e767
- SHA256
  
  deeb47a40e164aa80d8a47ecd8ca6f0098ea178dd1963c6998ec725c6f1c88e6
- SHA512
  
  d8978819ae335600399d81cf17de1af8c1d7e06ffaba6a4be931d84ecfcde60592440664157abf62cf875da8cba34fff55753738c4af1727dd4862171d119ffe
- SSDEEP
  
  384:wL7li/2zpq2DcEQvdQcJKLTp/NK9xaUn:upMCQ9cUn
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Uses the VBS compiler for execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Scripting

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2