648dec9bf8fc46309755437ea6626b731bc10aeca2f007fddaf29a30f14d166f | Triage

Sharing

General

Target

648dec9bf8fc46309755437ea6626b731bc10aeca2f007fddaf29a30f14d166f
Size

76KB
Sample

221014-mazamaaha4
MD5

62243bd3fa524afb5a368b088a284f38
SHA1

5eb8656459319d948b51dedec5aebb71307e69ae
SHA256

648dec9bf8fc46309755437ea6626b731bc10aeca2f007fddaf29a30f14d166f
SHA512

932bd7f5c302f3ec24c7859efcbbcd533843e9d8f61167fce414e9c5698de76765c391272326ba77ecc307837c74a2a189e840bf192db696f2efb38b9face2aa
SSDEEP

1536:VA7sbuq2p6oHUVOAn3wW6/7DcQ/9Dj4g:Kj1soHUVO531/N4g

Score

7^/10

Malware Config

Targets

- Target
  
  648dec9bf8fc46309755437ea6626b731bc10aeca2f007fddaf29a30f14d166f
- Size
  
  76KB
- MD5
  
  62243bd3fa524afb5a368b088a284f38
- SHA1
  
  5eb8656459319d948b51dedec5aebb71307e69ae
- SHA256
  
  648dec9bf8fc46309755437ea6626b731bc10aeca2f007fddaf29a30f14d166f
- SHA512
  
  932bd7f5c302f3ec24c7859efcbbcd533843e9d8f61167fce414e9c5698de76765c391272326ba77ecc307837c74a2a189e840bf192db696f2efb38b9face2aa
- SSDEEP
  
  1536:VA7sbuq2p6oHUVOAn3wW6/7DcQ/9Dj4g:Kj1soHUVO531/N4g
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2