979fecc55c04e3dfcc43089f121ec6db63424de6221980913f8c5d7cd81ebb49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

979fecc55c04e3dfcc43089f121ec6db63424de6221980913f8c5d7cd81ebb49
Size

112KB
Sample

221020-l5na6sghh2
MD5

963e78dad971c8ff3a45350d6006e909
SHA1

ebc7e9a59469b7de622e472e376636ed05315a79
SHA256

979fecc55c04e3dfcc43089f121ec6db63424de6221980913f8c5d7cd81ebb49
SHA512

cc2c01d16322e3206a5a07f2be59165aa98ecc6dd500c091eff4eeee14e8e9a40edb3a8645aa471cff11778b4015d79fc315e6d0d08f8c7e1fea1fc449da6e5f
SSDEEP

1536:E9wrx0UPQFkQZl2LSkS+yiPmuHS/UWrUuOOJE5fiExEENYaIT8VAyJ:E9wdQmQPgjTHScWrUmJElxEECEA

Score

7^/10

Malware Config

Targets

- Target
  
  979fecc55c04e3dfcc43089f121ec6db63424de6221980913f8c5d7cd81ebb49
- Size
  
  112KB
- MD5
  
  963e78dad971c8ff3a45350d6006e909
- SHA1
  
  ebc7e9a59469b7de622e472e376636ed05315a79
- SHA256
  
  979fecc55c04e3dfcc43089f121ec6db63424de6221980913f8c5d7cd81ebb49
- SHA512
  
  cc2c01d16322e3206a5a07f2be59165aa98ecc6dd500c091eff4eeee14e8e9a40edb3a8645aa471cff11778b4015d79fc315e6d0d08f8c7e1fea1fc449da6e5f
- SSDEEP
  
  1536:E9wrx0UPQFkQZl2LSkS+yiPmuHS/UWrUuOOJE5fiExEENYaIT8VAyJ:E9wdQmQPgjTHScWrUmJElxEECEA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2