46deb870781d4f1fca9e532cd991cb7ab2e527034172fbceeecee9e7b916538a | Triage

Sharing

General

Target

46deb870781d4f1fca9e532cd991cb7ab2e527034172fbceeecee9e7b916538a
Size

132KB
Sample

221020-l7g7yahah6
MD5

78ec8328512a6f19b74d0bdf124825d3
SHA1

b14c211b2d8547b2d6e7921cea5052fe658d84dc
SHA256

46deb870781d4f1fca9e532cd991cb7ab2e527034172fbceeecee9e7b916538a
SHA512

2b8b7aff9aed54e66717cf701450ba160b6645785b329f17377c5e1f8c32da2b24867226618504d010d7bc98b2cd1f7f969373552bbfe2b3df598434ce46c795
SSDEEP

1536:xXGopx+a1yi114ZrbdpX/YIg2CWjWNyq+8PUFo0/lIH8T7DN69D6R61qgxu3HRD3:LpIA11Gr73gej720qcbN0xA4A

Score

7^/10

Malware Config

Targets

- Target
  
  46deb870781d4f1fca9e532cd991cb7ab2e527034172fbceeecee9e7b916538a
- Size
  
  132KB
- MD5
  
  78ec8328512a6f19b74d0bdf124825d3
- SHA1
  
  b14c211b2d8547b2d6e7921cea5052fe658d84dc
- SHA256
  
  46deb870781d4f1fca9e532cd991cb7ab2e527034172fbceeecee9e7b916538a
- SHA512
  
  2b8b7aff9aed54e66717cf701450ba160b6645785b329f17377c5e1f8c32da2b24867226618504d010d7bc98b2cd1f7f969373552bbfe2b3df598434ce46c795
- SSDEEP
  
  1536:xXGopx+a1yi114ZrbdpX/YIg2CWjWNyq+8PUFo0/lIH8T7DN69D6R61qgxu3HRD3:LpIA11Gr73gej720qcbN0xA4A
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2