394ff02e25a8f60959e129b2b8d93558b0aaabb215a74914d3974cf32e7533f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

394ff02e25a8f60959e129b2b8d93558b0aaabb215a74914d3974cf32e7533f3
Size

53KB
Sample

221003-n8x1wsega4
MD5

684825466f4b5d37844aa3328ce7d92a
SHA1

4db36842c69d7930c3d495a894e106d39fc9c38d
SHA256

394ff02e25a8f60959e129b2b8d93558b0aaabb215a74914d3974cf32e7533f3
SHA512

c16c9c4c433263d9b66635b56df9e8bbe8f411ce46230ced69883ea5dbefa6e6f92c51a8dc9d079d4d7a00b68425a34548667dd2f40d83e6f74b0131ec194c31
SSDEEP

768:uJChTypVTFylNCQKowZS4E6SynTruH712N3b4wFBOV1mJt6oRZPJW2q5Q/2wRz:uAhTyTTFQNC13U4rtnDb4tmJ8AJq4R

Score

7^/10

Malware Config

Targets

- Target
  
  394ff02e25a8f60959e129b2b8d93558b0aaabb215a74914d3974cf32e7533f3
- Size
  
  53KB
- MD5
  
  684825466f4b5d37844aa3328ce7d92a
- SHA1
  
  4db36842c69d7930c3d495a894e106d39fc9c38d
- SHA256
  
  394ff02e25a8f60959e129b2b8d93558b0aaabb215a74914d3974cf32e7533f3
- SHA512
  
  c16c9c4c433263d9b66635b56df9e8bbe8f411ce46230ced69883ea5dbefa6e6f92c51a8dc9d079d4d7a00b68425a34548667dd2f40d83e6f74b0131ec194c31
- SSDEEP
  
  768:uJChTypVTFylNCQKowZS4E6SynTruH712N3b4wFBOV1mJt6oRZPJW2q5Q/2wRz:uAhTyTTFQNC13U4rtnDb4tmJ8AJq4R
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2