d86bc814e4ba746e0a25e7d84e9bcb09a24d823c4399b67987fa499d15bc8296 | Triage

Sharing

General

Target

1fd2d0c7d504be306ecaaf6e852142ca053950c386e3fd6ee8a1f2138ed89312.bin.sample.gz
Size

117KB
Sample

220603-gdhjdseabp
MD5

381bfa14e339251c7b717de5b9975aa3
SHA1

b9b1ce228100b4de559adb7211f41d5d18a78277
SHA256

d86bc814e4ba746e0a25e7d84e9bcb09a24d823c4399b67987fa499d15bc8296
SHA512

64ba00cbb85ebe278938633b30c12cfe36510f007f52d92911c0e90e0b3a097d3a1eaadd8fe924ae46b29a370a7c49035ca0ebe776b001a0cfa9de287a2cfa19

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  sample
- Size
  
  232KB
- MD5
  
  cebcd8313ba1ac74b30bc1c81a3a3a8f
- SHA1
  
  529a5e8f55a418db2ea054dc17bd63eaf6603b99
- SHA256
  
  1fd2d0c7d504be306ecaaf6e852142ca053950c386e3fd6ee8a1f2138ed89312
- SHA512
  
  6a9b3d4be974fcaa987f264db24d547254175b55b0df7767aacbae1890344b412a22819b2aab7da1e9f6aefaf665a2c32b6495d1872e4b67a83b30416701d3c3
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Modifies file permissions
  discovery
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2