227fbd8589ba588cad7a510f80de01700feaa200a6fe51f8da3f64fd05c5c32d | Triage

Sharing

General

Target

227fbd8589ba588cad7a510f80de01700feaa200a6fe51f8da3f64fd05c5c32d
Size

736KB
Sample

221003-n8e53sefh2
MD5

6528c3c8a13408336f6d52727b0b7a53
SHA1

16fb57f0c7c0dd2d85eff25114b5b8093fd0d085
SHA256

227fbd8589ba588cad7a510f80de01700feaa200a6fe51f8da3f64fd05c5c32d
SHA512

31a459d148dd88b5d4da069871f85c358563e975d82c8e4b890c292f809004f4500a61d7562e91071f0adaed44f115baa96a89eae2d4f41f1bb44a1cb8b93a41
SSDEEP

12288:gpQFKc84EnyLz1emmZ+kEOc4dYchfL7pNWZQZrJe2WhmbP:gpQAcnLzY7EP6PhfLziQMhhmbP

Score

7^/10

Malware Config

Targets

- Target
  
  227fbd8589ba588cad7a510f80de01700feaa200a6fe51f8da3f64fd05c5c32d
- Size
  
  736KB
- MD5
  
  6528c3c8a13408336f6d52727b0b7a53
- SHA1
  
  16fb57f0c7c0dd2d85eff25114b5b8093fd0d085
- SHA256
  
  227fbd8589ba588cad7a510f80de01700feaa200a6fe51f8da3f64fd05c5c32d
- SHA512
  
  31a459d148dd88b5d4da069871f85c358563e975d82c8e4b890c292f809004f4500a61d7562e91071f0adaed44f115baa96a89eae2d4f41f1bb44a1cb8b93a41
- SSDEEP
  
  12288:gpQFKc84EnyLz1emmZ+kEOc4dYchfL7pNWZQZrJe2WhmbP:gpQAcnLzY7EP6PhfLziQMhhmbP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2