1c2dbf68dbfce7d52f373190ca1dad1c106e206b887c3a321342fccd4b1dcd49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c2dbf68dbfce7d52f373190ca1dad1c106e206b887c3a321342fccd4b1dcd49
Size

35KB
Sample

221003-wg8bjshgcr
MD5

6cbc2fba5725576e388e5c65aeaaeb70
SHA1

06e1fe450f1fd2c9b92c026220409a2ea2d9dc60
SHA256

1c2dbf68dbfce7d52f373190ca1dad1c106e206b887c3a321342fccd4b1dcd49
SHA512

b142d2a4a879fe13d386e7bc08e4b551c7c362263f78ceac0a8746179a8bb0a709fe02466911c93a7c1d13ad5908ee0202df7a32127daa4e018afd88d3f5d901
SSDEEP

768:1HD9mxuCnNwCCuZ9UuV3I/1kCF8u3QaBepiBYSaHWD:TG6uUqCD3vBep2/a

Score

10^/10

evasion

Malware Config

Targets

- Target
  
  1c2dbf68dbfce7d52f373190ca1dad1c106e206b887c3a321342fccd4b1dcd49
- Size
  
  35KB
- MD5
  
  6cbc2fba5725576e388e5c65aeaaeb70
- SHA1
  
  06e1fe450f1fd2c9b92c026220409a2ea2d9dc60
- SHA256
  
  1c2dbf68dbfce7d52f373190ca1dad1c106e206b887c3a321342fccd4b1dcd49
- SHA512
  
  b142d2a4a879fe13d386e7bc08e4b551c7c362263f78ceac0a8746179a8bb0a709fe02466911c93a7c1d13ad5908ee0202df7a32127daa4e018afd88d3f5d901
- SSDEEP
  
  768:1HD9mxuCnNwCCuZ9UuV3I/1kCF8u3QaBepiBYSaHWD:TG6uUqCD3vBep2/a
Score

10^/10

evasion
- Modifies firewall policy service
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2