5d4a256dda44b47fdfb836e06a5abcb34e860d430ffdd0d5e4ea00f66ed16e33 | Triage

Sharing

General

Target

5d4a256dda44b47fdfb836e06a5abcb34e860d430ffdd0d5e4ea00f66ed16e33
Size

84KB
Sample

221011-clvfpsadg8
MD5

610edadba1155fa24b20c36227a5f1c0
SHA1

74db5c9443fbca3f0462b24d20c7c117ae242c6b
SHA256

5d4a256dda44b47fdfb836e06a5abcb34e860d430ffdd0d5e4ea00f66ed16e33
SHA512

9e972c00adbf1c68e82ee14ed93f2ce14a850d6c6f5da9688dba3dc0a733ef7c6d25e70c868f455c21bbd0b4951884a63224e3a6ee33cc5f772c3e24b542caea
SSDEEP

1536:dv2g8NyEegve1dkmwQegKYQuCL4mx8lsXit4:dB8NyBgvo6XBYQuCLqlW

Score

7^/10

Malware Config

Targets

- Target
  
  5d4a256dda44b47fdfb836e06a5abcb34e860d430ffdd0d5e4ea00f66ed16e33
- Size
  
  84KB
- MD5
  
  610edadba1155fa24b20c36227a5f1c0
- SHA1
  
  74db5c9443fbca3f0462b24d20c7c117ae242c6b
- SHA256
  
  5d4a256dda44b47fdfb836e06a5abcb34e860d430ffdd0d5e4ea00f66ed16e33
- SHA512
  
  9e972c00adbf1c68e82ee14ed93f2ce14a850d6c6f5da9688dba3dc0a733ef7c6d25e70c868f455c21bbd0b4951884a63224e3a6ee33cc5f772c3e24b542caea
- SSDEEP
  
  1536:dv2g8NyEegve1dkmwQegKYQuCL4mx8lsXit4:dB8NyBgvo6XBYQuCLqlW
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2