41bb237aba2daf77dcee5e02c7b634187a4fd8feb677c0f6417a0afc467b358d | Triage

Sharing

General

Target

41bb237aba2daf77dcee5e02c7b634187a4fd8feb677c0f6417a0afc467b358d
Size

112KB
Sample

221003-txbleaefh2
MD5

3dfc6b97ad44bf4ca8667a80e7023b80
SHA1

f33fdd4709d6cd6e91c7e6982e190b734d74c08b
SHA256

41bb237aba2daf77dcee5e02c7b634187a4fd8feb677c0f6417a0afc467b358d
SHA512

2967c25f23089ce5fe975d579f04082bfb53a15e9caefa943cb105094dd6ce4e90ba7409624baf2baf7a51ea901b499c4a2164c0c4e655a2552f32eecf292dfb
SSDEEP

1536:E9wro4UWQFkQZP2LSkS+yiPmuHS/UWrUuOOJE5fiExEENYaIT8XDyJ:E9whQmQZgjTHScWrUmJElxEECCD

Score

7^/10

Malware Config

Targets

- Target
  
  41bb237aba2daf77dcee5e02c7b634187a4fd8feb677c0f6417a0afc467b358d
- Size
  
  112KB
- MD5
  
  3dfc6b97ad44bf4ca8667a80e7023b80
- SHA1
  
  f33fdd4709d6cd6e91c7e6982e190b734d74c08b
- SHA256
  
  41bb237aba2daf77dcee5e02c7b634187a4fd8feb677c0f6417a0afc467b358d
- SHA512
  
  2967c25f23089ce5fe975d579f04082bfb53a15e9caefa943cb105094dd6ce4e90ba7409624baf2baf7a51ea901b499c4a2164c0c4e655a2552f32eecf292dfb
- SSDEEP
  
  1536:E9wro4UWQFkQZP2LSkS+yiPmuHS/UWrUuOOJE5fiExEENYaIT8XDyJ:E9whQmQZgjTHScWrUmJElxEECCD
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2