General
- Target eeee.exe
- Size 71.3MB
- Sample260608-s1mbmsgz6w
- SHA256 dd8fade3fa7d3af1a8de3f69aa421d0de2770cf8d041000372fad25e9e640ceb
- MD5 cba6f741f165781b7319faa4af9591d0
- SHA1 7bed8e3c6b02ece8ed8e1533be8a383a6950ad19
- SHA512 115cf26cb7ad4fa447847d93a7d62cecaeb92c35d186b3ef1b53e6cbdad83d1ca190c4062a3f6fdfc4e5f5b68e3bdd8c35a5a959caf8f276bb1da7e9955f3a82
- SSDEEP 1572864:hYP+kUFp1UmCLodnyPRf+SqwbByG8byRbJCZL7IwdqRiUcKhQV:9FXUmndnyf+FuyXyRNCxSV2
- TLSH T150F7336BDA11142C952F39B0990B3FAEFC987196787F43446A66CBD83B56C20F3E54C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eeee.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target eeee.exe
- Size 71.3MB
- SHA256 dd8fade3fa7d3af1a8de3f69aa421d0de2770cf8d041000372fad25e9e640ceb
- MD5 cba6f741f165781b7319faa4af9591d0
- SHA1 7bed8e3c6b02ece8ed8e1533be8a383a6950ad19
- SHA512 115cf26cb7ad4fa447847d93a7d62cecaeb92c35d186b3ef1b53e6cbdad83d1ca190c4062a3f6fdfc4e5f5b68e3bdd8c35a5a959caf8f276bb1da7e9955f3a82
- SSDEEP 1572864:hYP+kUFp1UmCLodnyPRf+SqwbByG8byRbJCZL7IwdqRiUcKhQV:9FXUmndnyf+FuyXyRNCxSV2
- TLSH T150F7336BDA11142C952F39B0990B3FAEFC987196787F43446A66CBD83B56C20F3E54C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.