6c880ff92273e4f0ea9bb971d0a0a34bc70e793e283a0ef7258c0fb262a4b9da | Triage

Sharing

General

Target

6c880ff92273e4f0ea9bb971d0a0a34bc70e793e283a0ef7258c0fb262a4b9da
Size

148KB
Sample

221003-danz8aedfp
MD5

6924595ad703c1555efacfbdb548df50
SHA1

05f148c8f9bd9214a06e018834adfb96b31d2d0b
SHA256

6c880ff92273e4f0ea9bb971d0a0a34bc70e793e283a0ef7258c0fb262a4b9da
SHA512

6388b5d1f1af7b495f44ef9484904203d19b8fea948665dec435c282635b4ff80c7046a3864ef063a429be9acea53517ab733dd7e5b8781f24de96e81fae8274
SSDEEP

3072:mmqgvg5gRdVmzz92fZ4iUP0xQJeLe0ex8qI:UGdVsxgZ4NcxQJeLe0ex8q

Score

7^/10

Malware Config

Targets

- Target
  
  6c880ff92273e4f0ea9bb971d0a0a34bc70e793e283a0ef7258c0fb262a4b9da
- Size
  
  148KB
- MD5
  
  6924595ad703c1555efacfbdb548df50
- SHA1
  
  05f148c8f9bd9214a06e018834adfb96b31d2d0b
- SHA256
  
  6c880ff92273e4f0ea9bb971d0a0a34bc70e793e283a0ef7258c0fb262a4b9da
- SHA512
  
  6388b5d1f1af7b495f44ef9484904203d19b8fea948665dec435c282635b4ff80c7046a3864ef063a429be9acea53517ab733dd7e5b8781f24de96e81fae8274
- SSDEEP
  
  3072:mmqgvg5gRdVmzz92fZ4iUP0xQJeLe0ex8qI:UGdVsxgZ4NcxQJeLe0ex8q
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2