709ee47d5eb993b188e68e049e28d820bbe1ef103be7f233fffed0b3c5f60c71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

709ee47d5eb993b188e68e049e28d820bbe1ef103be7f233fffed0b3c5f60c71
Size

706KB
Sample

221002-mhh9dabbg3
MD5

63a1ba88078ade1628097ec290a8e88f
SHA1

03a397173706e1bc3496a46253b7e8d483ae4bd1
SHA256

709ee47d5eb993b188e68e049e28d820bbe1ef103be7f233fffed0b3c5f60c71
SHA512

e62a4384faa3df3f8abdfb8ea9e528185f1eae3cb6fe5741283230d021ad6d944038799c61030f6bc777f76d2cbc0b284116d09129d0fb79563db923f22853ac
SSDEEP

12288:gp/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGsp8F6fHEM9IEtrjea:gpQ/6trYlvYPK+lqD73TeGsprsM9I2/J

Score

8^/10

Malware Config

Targets

- Target
  
  709ee47d5eb993b188e68e049e28d820bbe1ef103be7f233fffed0b3c5f60c71
- Size
  
  706KB
- MD5
  
  63a1ba88078ade1628097ec290a8e88f
- SHA1
  
  03a397173706e1bc3496a46253b7e8d483ae4bd1
- SHA256
  
  709ee47d5eb993b188e68e049e28d820bbe1ef103be7f233fffed0b3c5f60c71
- SHA512
  
  e62a4384faa3df3f8abdfb8ea9e528185f1eae3cb6fe5741283230d021ad6d944038799c61030f6bc777f76d2cbc0b284116d09129d0fb79563db923f22853ac
- SSDEEP
  
  12288:gp/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGsp8F6fHEM9IEtrjea:gpQ/6trYlvYPK+lqD73TeGsprsM9I2/J
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2