0ecfc2d06b7a407dd8a05cefefe34a832ddd841d08b2f21fd401ff0db4b9fb32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Recibo de transação de pagamento.exe
Size

10KB
Sample

221031-ynbl9scec4
MD5

42125c48f136b5a0f45c238b164981f5
SHA1

9c1eb44a7ff49dec8b076cf4b65bb21c6ef03afc
SHA256

0ecfc2d06b7a407dd8a05cefefe34a832ddd841d08b2f21fd401ff0db4b9fb32
SHA512

a79c000417a729d28559554a00210ba154eba703b93aed31c55ed07a93ca555e18facc5e5f90e033e7966919387fc1b4aa213adbf4afff5bf5e6129be522872c
SSDEEP

192:xExYQU0TZZSMAFE446Ax8stYcFmVc03KY:WeCZZS9FBAxptYcFmVc03K

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  Recibo de transação de pagamento.exe
- Size
  
  10KB
- MD5
  
  42125c48f136b5a0f45c238b164981f5
- SHA1
  
  9c1eb44a7ff49dec8b076cf4b65bb21c6ef03afc
- SHA256
  
  0ecfc2d06b7a407dd8a05cefefe34a832ddd841d08b2f21fd401ff0db4b9fb32
- SHA512
  
  a79c000417a729d28559554a00210ba154eba703b93aed31c55ed07a93ca555e18facc5e5f90e033e7966919387fc1b4aa213adbf4afff5bf5e6129be522872c
- SSDEEP
  
  192:xExYQU0TZZSMAFE446Ax8stYcFmVc03KY:WeCZZS9FBAxptYcFmVc03K
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2