cd0a5e0ec69730ae9803612e6cfac10a206b6fee9b12ef43587daf32e1c45bb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd0a5e0ec69730ae9803612e6cfac10a206b6fee9b12ef43587daf32e1c45bb9
Size

949KB
Sample

221106-r1sb8affc4
MD5

245fd6ed4e4d66931e35d0749caecc65
SHA1

3e31e48577311654b9781fa05224e9bf2d1282c6
SHA256

cd0a5e0ec69730ae9803612e6cfac10a206b6fee9b12ef43587daf32e1c45bb9
SHA512

cb8062035fef2cdc6fe405dca6a69529232c5958ad256df91110193763e30103d506487897dcf6feffcec9dea3d71d0b84dfce3a5d33392a0085d5ebaa9f7f95
SSDEEP

12288:fWgMJ8ucq6fqWgMJ8ucq6fInGmX4eAi3GAhcyAZJ6NBvC27ofszzAK2ZBN/pigg5:pqmyqmITIePGHyYItkIABfNxiggUS

Score

8^/10

Malware Config

Targets

- Target
  
  cd0a5e0ec69730ae9803612e6cfac10a206b6fee9b12ef43587daf32e1c45bb9
- Size
  
  949KB
- MD5
  
  245fd6ed4e4d66931e35d0749caecc65
- SHA1
  
  3e31e48577311654b9781fa05224e9bf2d1282c6
- SHA256
  
  cd0a5e0ec69730ae9803612e6cfac10a206b6fee9b12ef43587daf32e1c45bb9
- SHA512
  
  cb8062035fef2cdc6fe405dca6a69529232c5958ad256df91110193763e30103d506487897dcf6feffcec9dea3d71d0b84dfce3a5d33392a0085d5ebaa9f7f95
- SSDEEP
  
  12288:fWgMJ8ucq6fqWgMJ8ucq6fInGmX4eAi3GAhcyAZJ6NBvC27ofszzAK2ZBN/pigg5:pqmyqmITIePGHyYItkIABfNxiggUS
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2