9d4f43b21e35b9373aac0f4b3335c8b07887121168158cf4a378436a90152fba | Triage

Sharing

General

Target

67nnmh.ace
Size

1KB
Sample

220912-h1h9wagedl
MD5

6c3096ac9a321188c2518d29b1eaf3df
SHA1

e2c7a3183c3168fce9227aac36505fe5f33583cc
SHA256

9d4f43b21e35b9373aac0f4b3335c8b07887121168158cf4a378436a90152fba
SHA512

804c81b84d1811379ea247991170a88bba8fbdd9876f2cf2f782aec31a6ed24207828df864a27f9557fe54f6d90585d8e55096f5c52971f3356d714448273056

Score

8^/10

Malware Config

Targets

- Target
  
  DINAHALAC_DOKUMENT_307891_4684203_RNGPRV_NEW_UPDATED_ORDER_DOO_AVAILABLE.vbs
- Size
  
  3KB
- MD5
  
  31439fb7f79009fbed1abfeeb4d4a35b
- SHA1
  
  0a7b86b5b5633ef29bf928c5b7f4649225ee0aee
- SHA256
  
  55f287c30331608f0796a2c9bda16a5a9429b7cb0c8d3928d2ee63184bfce9fb
- SHA512
  
  de6af2f4119cadcfaa72c50c415e1105784794e345041058fc424d02d43e55ebd7112b499d460e376c400372906b396097183865892736d5cbc2dd289ca55691
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2