60e056bd626d720fb7f7d12b7672dc084943e2cca3c25613b1045669766039e6 | Triage

Sharing

General

Target

60e056bd626d720fb7f7d12b7672dc084943e2cca3c25613b1045669766039e6
Size

11KB
Sample

220730-2xbkeacggp
MD5

4f6c704c09a4afb4d9020d3249a470fb
SHA1

b143a428a9d82e7ff185cfa9a4e71702c8a8a106
SHA256

60e056bd626d720fb7f7d12b7672dc084943e2cca3c25613b1045669766039e6
SHA512

911c5c249df39f22022c2a6cdddab7d9cd868dbd4db1d7db178860b7ac261787b9cfd185ec9e8c8c5086cdd550c649661b1c766331fb2833c1a8984cc09701e9

Score

8^/10

Malware Config

Targets

- Target
  
  Document_442724870540US_Apr_28_2019.js
- Size
  
  38KB
- MD5
  
  2c255638e9f931532dc429698698fa7b
- SHA1
  
  8fbdcbc759c6d373e591bf4d03639e88487b29ae
- SHA256
  
  c2c75ef2cf7461733ccfcf2695ca9c2f3609ba27620ca160362ff85cd7d61559
- SHA512
  
  0747f55d2494e9ae0811b435b3101ed41b66675e42cbfd1960f07e2dccb03626f815f298d0ccbb2c3b4aaff803f7ae511ac789b9f07caa669f716294d5245d66
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2