9a9c5a783c6b71c40eb265c64eaa8cf7c63a871ebd0cffb3a92cabcf7afa9fc2 | Triage

Sharing

General

Target

9a9c5a783c6b71c40eb265c64eaa8cf7c63a871ebd0cffb3a92cabcf7afa9fc2
Size

24KB
Sample

221019-1247vaafd4
MD5

a0f0345ff461ec4044b99719a9ec385c
SHA1

2855035aae619379b46bcbf00c9560dd1a36b87a
SHA256

9a9c5a783c6b71c40eb265c64eaa8cf7c63a871ebd0cffb3a92cabcf7afa9fc2
SHA512

b148553692b73ef9cde9f504eeff71f28fbf433f27aa5df5d06f0217719399e9e342a46c98fb2d8ed7785c90a7a7c925f7f64e30558cbda6dd748e1ac1021242
SSDEEP

384:Qfot37qiGpSEQhHmlkO7zM2eyinLk24jXPlsoP4uoJ/8CHXhgqleln:Ft37gpLQ1M7EhyG2XPuoPpln

Score

7^/10

Malware Config

Targets

- Target
  
  9a9c5a783c6b71c40eb265c64eaa8cf7c63a871ebd0cffb3a92cabcf7afa9fc2
- Size
  
  24KB
- MD5
  
  a0f0345ff461ec4044b99719a9ec385c
- SHA1
  
  2855035aae619379b46bcbf00c9560dd1a36b87a
- SHA256
  
  9a9c5a783c6b71c40eb265c64eaa8cf7c63a871ebd0cffb3a92cabcf7afa9fc2
- SHA512
  
  b148553692b73ef9cde9f504eeff71f28fbf433f27aa5df5d06f0217719399e9e342a46c98fb2d8ed7785c90a7a7c925f7f64e30558cbda6dd748e1ac1021242
- SSDEEP
  
  384:Qfot37qiGpSEQhHmlkO7zM2eyinLk24jXPlsoP4uoJ/8CHXhgqleln:Ft37gpLQ1M7EhyG2XPuoPpln
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2