2a48f0be77f89565a84389c6aa16314ac1df67a74ef93baaa34ec8b50bffe07e | Triage

Sharing

General

Target

2a48f0be77f89565a84389c6aa16314ac1df67a74ef93baaa34ec8b50bffe07e
Size

100KB
Sample

221030-ylwjnagdb5
MD5

91ec57d509f1acc1daf89184046dd4a0
SHA1

5b5abcc2b8182cfd2525213dda660a54e51b5345
SHA256

2a48f0be77f89565a84389c6aa16314ac1df67a74ef93baaa34ec8b50bffe07e
SHA512

353c4865d2b8fe55e0b84b9de63c2fde7f8f3fb47b2ba8a18618667a3c6ec568281e80f30a2c80319db90b5a83994a5c9d0c2f26b3cbb12ef86dd4c3f096c52a
SSDEEP

1536:c69gJ6UHUJxDsOqmbe97ounkWv5Q6YEVMz:Z9q6UHUJWxmbeyunrvqvAO

Score

7^/10

Malware Config

Targets

- Target
  
  2a48f0be77f89565a84389c6aa16314ac1df67a74ef93baaa34ec8b50bffe07e
- Size
  
  100KB
- MD5
  
  91ec57d509f1acc1daf89184046dd4a0
- SHA1
  
  5b5abcc2b8182cfd2525213dda660a54e51b5345
- SHA256
  
  2a48f0be77f89565a84389c6aa16314ac1df67a74ef93baaa34ec8b50bffe07e
- SHA512
  
  353c4865d2b8fe55e0b84b9de63c2fde7f8f3fb47b2ba8a18618667a3c6ec568281e80f30a2c80319db90b5a83994a5c9d0c2f26b3cbb12ef86dd4c3f096c52a
- SSDEEP
  
  1536:c69gJ6UHUJxDsOqmbe97ounkWv5Q6YEVMz:Z9q6UHUJWxmbeyunrvqvAO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2