a618835791803658f70206b7f697165cecd1ad532c8f14e49bc93d3a0a133461 | Triage

Sharing

General

Target

a618835791803658f70206b7f697165cecd1ad532c8f14e49bc93d3a0a133461
Size

1.1MB
Sample

221028-276tasbhdq
MD5

0b15143903635fafae49dbf03407af7b
SHA1

632008a3f5b2d730826e6a95a260e36e38b7d7b0
SHA256

a618835791803658f70206b7f697165cecd1ad532c8f14e49bc93d3a0a133461
SHA512

9efb69260332cb0f9011c939eae1349710317b611877351d3c607a5811b4fc216e779e16199e6c40fd7aad56d7376cfc0df0c5c29f86470f28ccce0f7625fac4
SSDEEP

24576:ww0peow6/GmPN760aABzSbE0nc4v2o6IsQPTYDIH17GwoYw:oTbVSrz6nWH1GP/

Score

8^/10

Malware Config

Targets

- Target
  
  a618835791803658f70206b7f697165cecd1ad532c8f14e49bc93d3a0a133461
- Size
  
  1.1MB
- MD5
  
  0b15143903635fafae49dbf03407af7b
- SHA1
  
  632008a3f5b2d730826e6a95a260e36e38b7d7b0
- SHA256
  
  a618835791803658f70206b7f697165cecd1ad532c8f14e49bc93d3a0a133461
- SHA512
  
  9efb69260332cb0f9011c939eae1349710317b611877351d3c607a5811b4fc216e779e16199e6c40fd7aad56d7376cfc0df0c5c29f86470f28ccce0f7625fac4
- SSDEEP
  
  24576:ww0peow6/GmPN760aABzSbE0nc4v2o6IsQPTYDIH17GwoYw:oTbVSrz6nWH1GP/
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2