ea11da8f43eda07a096d3ed764c6b245198721601b2857b7b0e378c17a836b8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea11da8f43eda07a096d3ed764c6b245198721601b2857b7b0e378c17a836b8a
Size

38KB
Sample

241006-ehfjgsweng
MD5

72b941592b966624b36c426a2155c552
SHA1

0655d9ea8b9a7c06da9a7a0ba1d54e58b8463624
SHA256

ea11da8f43eda07a096d3ed764c6b245198721601b2857b7b0e378c17a836b8a
SHA512

1618b9183e5be7795d3a5a30c0b4862a0987bf87f146989dd9b432a64de37e2771abbaa4a94bba13f77ea02005004d9935f6dd84e9c937a632f107bb45874fb3
SSDEEP

768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDZFB:bAvJCF+RQgJeab4sbh

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ea11da8f43eda07a096d3ed764c6b245198721601b2857b7b0e378c17a836b8a
- Size
  
  38KB
- MD5
  
  72b941592b966624b36c426a2155c552
- SHA1
  
  0655d9ea8b9a7c06da9a7a0ba1d54e58b8463624
- SHA256
  
  ea11da8f43eda07a096d3ed764c6b245198721601b2857b7b0e378c17a836b8a
- SHA512
  
  1618b9183e5be7795d3a5a30c0b4862a0987bf87f146989dd9b432a64de37e2771abbaa4a94bba13f77ea02005004d9935f6dd84e9c937a632f107bb45874fb3
- SSDEEP
  
  768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDZFB:bAvJCF+RQgJeab4sbh
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2