99bf4fe4a20e63996eb4cdf14a1f7e3a99a8014bc8b9f3d6ba902819bd0df407 | Triage

Sharing

General

Target

99bf4fe4a20e63996eb4cdf14a1f7e3a99a8014bc8b9f3d6ba902819bd0df407
Size

156KB
Sample

221004-b22paafhc2
MD5

06d299ac4e7361e21c37adf185bf9670
SHA1

e7048e7419533a221de51cdd10cc8c81d3cafc49
SHA256

99bf4fe4a20e63996eb4cdf14a1f7e3a99a8014bc8b9f3d6ba902819bd0df407
SHA512

fe9aa8c4aca0cf986d71d74f14f8c7d8d83a41c63735b91fe9ff1ebb5d39b7a45b4c683ce56629dc1ecd5136c17c59f4be1a1ec9c472426988aa3d20289a6ffd
SSDEEP

3072:8rfYStS11rNiWzy9E10CZW9AxXFR6gLxeYlm05A7QoE08:Gf3tmxiWzy9E10CZW9ANF0g0YwgAcG

Score

7^/10

Malware Config

Targets

- Target
  
  99bf4fe4a20e63996eb4cdf14a1f7e3a99a8014bc8b9f3d6ba902819bd0df407
- Size
  
  156KB
- MD5
  
  06d299ac4e7361e21c37adf185bf9670
- SHA1
  
  e7048e7419533a221de51cdd10cc8c81d3cafc49
- SHA256
  
  99bf4fe4a20e63996eb4cdf14a1f7e3a99a8014bc8b9f3d6ba902819bd0df407
- SHA512
  
  fe9aa8c4aca0cf986d71d74f14f8c7d8d83a41c63735b91fe9ff1ebb5d39b7a45b4c683ce56629dc1ecd5136c17c59f4be1a1ec9c472426988aa3d20289a6ffd
- SSDEEP
  
  3072:8rfYStS11rNiWzy9E10CZW9AxXFR6gLxeYlm05A7QoE08:Gf3tmxiWzy9E10CZW9ANF0g0YwgAcG
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2