d466f42248a8e13782a08ac0db89c4ff8b50dca2501e550f714a1ba9b75ee5aa | Triage

Sharing

General

Target

d466f42248a8e13782a08ac0db89c4ff8b50dca2501e550f714a1ba9b75ee5aa
Size

385KB
Sample

220919-k2ezyshff2
MD5

c6f15db7890259d6cdaa2a72af49b349
SHA1

e3ca07ee2c90e8f1d053bb98d5db3395388f8310
SHA256

d466f42248a8e13782a08ac0db89c4ff8b50dca2501e550f714a1ba9b75ee5aa
SHA512

1762570d5d9f40b5b890b305c5eabc523a50cc7cf83f418c9e649485461c275e2d32c6a7ec44e7f80dbe8a5074f9f857aee67e428a6e04ef461679321fd02abe
SSDEEP

6144:31xvkadajdXIRYORzKMkANmfbsNihX1aDOPOmqXGSA8FRXuHvm9A17glr:rv1dajdXIRHzvMYWX0y58TXuHrS

Score

7^/10

Malware Config

Targets

- Target
  
  d466f42248a8e13782a08ac0db89c4ff8b50dca2501e550f714a1ba9b75ee5aa
- Size
  
  385KB
- MD5
  
  c6f15db7890259d6cdaa2a72af49b349
- SHA1
  
  e3ca07ee2c90e8f1d053bb98d5db3395388f8310
- SHA256
  
  d466f42248a8e13782a08ac0db89c4ff8b50dca2501e550f714a1ba9b75ee5aa
- SHA512
  
  1762570d5d9f40b5b890b305c5eabc523a50cc7cf83f418c9e649485461c275e2d32c6a7ec44e7f80dbe8a5074f9f857aee67e428a6e04ef461679321fd02abe
- SSDEEP
  
  6144:31xvkadajdXIRYORzKMkANmfbsNihX1aDOPOmqXGSA8FRXuHvm9A17glr:rv1dajdXIRHzvMYWX0y58TXuHrS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2