064b138ac4bb659f33b3a81ab17b74fa0b7a7c73c728551d4320162e96abb139 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

064b138ac4bb659f33b3a81ab17b74fa0b7a7c73c728551d4320162e96abb139
Size

72KB
Sample

221002-amjz9addf2
MD5

71071735518de25396cdeace0ca8281e
SHA1

5c50ddd0550adbdd6ad426ead26ecdac72fe6a83
SHA256

064b138ac4bb659f33b3a81ab17b74fa0b7a7c73c728551d4320162e96abb139
SHA512

bd2dc33ea1f5a953875b70028213a781dfcaad3a65a0486538a48867ea837e944794f060feea6b9c3d8595ce6db6987d23ec1295d3757cd712266f2beb887931
SSDEEP

768:9OJ1iSvKkOCfJb4kHrgrTi6yBJJyNKJCviXDyiwSuo6zCNKVB0:cbHirEJycA8Dy9Suo6zCq

Score

7^/10

Malware Config

Targets

- Target
  
  064b138ac4bb659f33b3a81ab17b74fa0b7a7c73c728551d4320162e96abb139
- Size
  
  72KB
- MD5
  
  71071735518de25396cdeace0ca8281e
- SHA1
  
  5c50ddd0550adbdd6ad426ead26ecdac72fe6a83
- SHA256
  
  064b138ac4bb659f33b3a81ab17b74fa0b7a7c73c728551d4320162e96abb139
- SHA512
  
  bd2dc33ea1f5a953875b70028213a781dfcaad3a65a0486538a48867ea837e944794f060feea6b9c3d8595ce6db6987d23ec1295d3757cd712266f2beb887931
- SSDEEP
  
  768:9OJ1iSvKkOCfJb4kHrgrTi6yBJJyNKJCviXDyiwSuo6zCNKVB0:cbHirEJycA8Dy9Suo6zCq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2