c6ff045ea527207672d4dcda0822990c7e4affd6e358932f2f6896a5fa442288 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6ff045ea527207672d4dcda0822990c7e4affd6e358932f2f6896a5fa442288
Size

72KB
Sample

220919-rxv9psghcl
MD5

1abe47e0df495beb485ff4062f188fe7
SHA1

d905a6616600d0a97ce03e4aba17d600c6c4ed8d
SHA256

c6ff045ea527207672d4dcda0822990c7e4affd6e358932f2f6896a5fa442288
SHA512

32005097a275b57d1108652b22be8e740694fa40b77a56758fa0af58340f2d8a3d3e134eba130261a73fbcb46e54492c32f14bdb8f1405a7d0ecdbc73790cbf3
SSDEEP

768:Keb7WM8xnP/Eth0hJGmJx3LoINdKLQZvwmywbwKwwowwwwwwwqwwwwnwwwww0wwz:F4xnHS0hJllZVqrP3

Score

7^/10

Malware Config

Targets

- Target
  
  c6ff045ea527207672d4dcda0822990c7e4affd6e358932f2f6896a5fa442288
- Size
  
  72KB
- MD5
  
  1abe47e0df495beb485ff4062f188fe7
- SHA1
  
  d905a6616600d0a97ce03e4aba17d600c6c4ed8d
- SHA256
  
  c6ff045ea527207672d4dcda0822990c7e4affd6e358932f2f6896a5fa442288
- SHA512
  
  32005097a275b57d1108652b22be8e740694fa40b77a56758fa0af58340f2d8a3d3e134eba130261a73fbcb46e54492c32f14bdb8f1405a7d0ecdbc73790cbf3
- SSDEEP
  
  768:Keb7WM8xnP/Eth0hJGmJx3LoINdKLQZvwmywbwKwwowwwwwwwqwwwwnwwwww0wwz:F4xnHS0hJllZVqrP3
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2