ab81f6a955c8e163b36fb04dc98e2c2a6eac43dbfabfd93767a9baab40f38ed3 | Triage

Sharing

General

Target

ab81f6a955c8e163b36fb04dc98e2c2a6eac43dbfabfd93767a9baab40f38ed3
Size

184KB
Sample

221107-k2nbbsbedj
MD5

89b6c992d4852c67a999afc194297fb0
SHA1

85e9bc37eeb6717de826a35a072ee90211fda3a9
SHA256

ab81f6a955c8e163b36fb04dc98e2c2a6eac43dbfabfd93767a9baab40f38ed3
SHA512

079d0ad13d5c001672cead9e0a150c0938d1b754fb349d282c149f1e6b3931998166f4b33854da1878987d2f910a7c4a1995252c6a4ecf57141e9d9ee081a912
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3+:/7BSH8zUB+nGESaaRvoB7FJNndnH

Score

8^/10

Malware Config

Targets

- Target
  
  ab81f6a955c8e163b36fb04dc98e2c2a6eac43dbfabfd93767a9baab40f38ed3
- Size
  
  184KB
- MD5
  
  89b6c992d4852c67a999afc194297fb0
- SHA1
  
  85e9bc37eeb6717de826a35a072ee90211fda3a9
- SHA256
  
  ab81f6a955c8e163b36fb04dc98e2c2a6eac43dbfabfd93767a9baab40f38ed3
- SHA512
  
  079d0ad13d5c001672cead9e0a150c0938d1b754fb349d282c149f1e6b3931998166f4b33854da1878987d2f910a7c4a1995252c6a4ecf57141e9d9ee081a912
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3+:/7BSH8zUB+nGESaaRvoB7FJNndnH
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2