1f6a5c1a362037418ea29817b2b004fedd453126422c2d19c8a2ba19bf7a1c82 | Triage

Sharing

General

Target

1f6a5c1a362037418ea29817b2b004fedd453126422c2d19c8a2ba19bf7a1c82
Size

92KB
Sample

221030-wfdqjsceb8
MD5

8320554ebfa8c9ba269b68af2e827e87
SHA1

643fae6cbdf78628224dc541413fe49ea7ca7369
SHA256

1f6a5c1a362037418ea29817b2b004fedd453126422c2d19c8a2ba19bf7a1c82
SHA512

bdff9447d4725deca2b5800b5ff7c02a045772891d5db2beff6ebf6e408d49a7a7bca4cae252dd14ec44c7081c7ab8c131549cc4fefd4c55e04eeb231864df66
SSDEEP

768:K99XHugT0lvlq/P1vwwrnkjBt1ZJk8vK8GSdrD9wGy241ZUb/CxhYLJP30UOEGaK:+5PuB7mUbaxeLd4IfmkBwC8BD+KBq2x

Score

7^/10

Malware Config

Targets

- Target
  
  1f6a5c1a362037418ea29817b2b004fedd453126422c2d19c8a2ba19bf7a1c82
- Size
  
  92KB
- MD5
  
  8320554ebfa8c9ba269b68af2e827e87
- SHA1
  
  643fae6cbdf78628224dc541413fe49ea7ca7369
- SHA256
  
  1f6a5c1a362037418ea29817b2b004fedd453126422c2d19c8a2ba19bf7a1c82
- SHA512
  
  bdff9447d4725deca2b5800b5ff7c02a045772891d5db2beff6ebf6e408d49a7a7bca4cae252dd14ec44c7081c7ab8c131549cc4fefd4c55e04eeb231864df66
- SSDEEP
  
  768:K99XHugT0lvlq/P1vwwrnkjBt1ZJk8vK8GSdrD9wGy241ZUb/CxhYLJP30UOEGaK:+5PuB7mUbaxeLd4IfmkBwC8BD+KBq2x
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2