8a28a1d91e732a6310d30f430e970c1b6560b0d00baa23173d8f6acd629ea197 | Triage

Sharing

General

Target

8a28a1d91e732a6310d30f430e970c1b6560b0d00baa23173d8f6acd629ea197
Size

112KB
Sample

221003-tvvlhaefb6
MD5

68a98b2a13fda3c7d1f29e512ef5c52e
SHA1

a3b9520cad3cc9db6433ca57bc745781fd1418d7
SHA256

8a28a1d91e732a6310d30f430e970c1b6560b0d00baa23173d8f6acd629ea197
SHA512

f311052633089917b79b42f682438e7f388d4e4d53d79660a97f36672b5a6256b6a79d20575d2833f6f4462319f4f435b5c4d5105b16d4b10653a70982cc0eac
SSDEEP

1536:E9wrhoUwQFkQZI2LSkS+yiPmuHS/UWrUuOOJE5fiExEENYaIT8fvyJ:E9wuQmQegjTHScWrUmJElxEEC6v

Score

7^/10

Malware Config

Targets

- Target
  
  8a28a1d91e732a6310d30f430e970c1b6560b0d00baa23173d8f6acd629ea197
- Size
  
  112KB
- MD5
  
  68a98b2a13fda3c7d1f29e512ef5c52e
- SHA1
  
  a3b9520cad3cc9db6433ca57bc745781fd1418d7
- SHA256
  
  8a28a1d91e732a6310d30f430e970c1b6560b0d00baa23173d8f6acd629ea197
- SHA512
  
  f311052633089917b79b42f682438e7f388d4e4d53d79660a97f36672b5a6256b6a79d20575d2833f6f4462319f4f435b5c4d5105b16d4b10653a70982cc0eac
- SSDEEP
  
  1536:E9wrhoUwQFkQZI2LSkS+yiPmuHS/UWrUuOOJE5fiExEENYaIT8fvyJ:E9wuQmQegjTHScWrUmJElxEEC6v
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2