be239acaf71b27fb7efb3274d6da83755b60aa8ac6cfa3a74bb8b3c7fd147070 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be239acaf71b27fb7efb3274d6da83755b60aa8ac6cfa3a74bb8b3c7fd147070
Size

96KB
Sample

221029-3zz68acee7
MD5

933847f30a7ae7a7c9c5cfb0c4aeac20
SHA1

4484ae2fb960a601fedcc125a138558f308d9083
SHA256

be239acaf71b27fb7efb3274d6da83755b60aa8ac6cfa3a74bb8b3c7fd147070
SHA512

9464befc41ba25ec70ee27a891177cc564cbb44e1da20cedc8205d4892e0e7209fafb6038c901c2eb0f1981202c3997ce5061ac65df5f793666cf16cb15a5f94
SSDEEP

1536:hoq1/jBL6sK5vjUExC1jYlEUfROtYYl7vdhXLUFKEOPY7eOobtWB:qo/jBL6sK5vA2hfROtd7ZUFlyhWB

Score

7^/10

Malware Config

Targets

- Target
  
  be239acaf71b27fb7efb3274d6da83755b60aa8ac6cfa3a74bb8b3c7fd147070
- Size
  
  96KB
- MD5
  
  933847f30a7ae7a7c9c5cfb0c4aeac20
- SHA1
  
  4484ae2fb960a601fedcc125a138558f308d9083
- SHA256
  
  be239acaf71b27fb7efb3274d6da83755b60aa8ac6cfa3a74bb8b3c7fd147070
- SHA512
  
  9464befc41ba25ec70ee27a891177cc564cbb44e1da20cedc8205d4892e0e7209fafb6038c901c2eb0f1981202c3997ce5061ac65df5f793666cf16cb15a5f94
- SSDEEP
  
  1536:hoq1/jBL6sK5vjUExC1jYlEUfROtYYl7vdhXLUFKEOPY7eOobtWB:qo/jBL6sK5vA2hfROtd7ZUFlyhWB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2