0ed3ce0f13bd721bc78bd411e74aeb3e772588d2bb1b3f2d2be4e390164646ec | Triage

Sharing

General

Target

0ed3ce0f13bd721bc78bd411e74aeb3e772588d2bb1b3f2d2be4e390164646ec
Size

513KB
Sample

220604-v8d2cahbh8
MD5

4437932f91042579798df965170c55a8
SHA1

d441dc9ceb4fc7fa8c7c9460031a325e91388a6b
SHA256

0ed3ce0f13bd721bc78bd411e74aeb3e772588d2bb1b3f2d2be4e390164646ec
SHA512

024a7460a225762ad85aa409e32db6dac0e3f0e63e8e01961564ae6c016e02d86537355f27e004c94dfb0f8152d25f7ec06fd003c5fc13f75b6ac8ead69dc2c7

Score

7^/10

Malware Config

Targets

- Target
  
  0ed3ce0f13bd721bc78bd411e74aeb3e772588d2bb1b3f2d2be4e390164646ec
- Size
  
  513KB
- MD5
  
  4437932f91042579798df965170c55a8
- SHA1
  
  d441dc9ceb4fc7fa8c7c9460031a325e91388a6b
- SHA256
  
  0ed3ce0f13bd721bc78bd411e74aeb3e772588d2bb1b3f2d2be4e390164646ec
- SHA512
  
  024a7460a225762ad85aa409e32db6dac0e3f0e63e8e01961564ae6c016e02d86537355f27e004c94dfb0f8152d25f7ec06fd003c5fc13f75b6ac8ead69dc2c7
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Tasks

static1

behavioral1

behavioral2