ab7c1884205e0b4ff115dbd8b2faa90d51f5a88273b85f53b97c3db062428ccc | Triage

Sharing

General

Target

ab7c1884205e0b4ff115dbd8b2faa90d51f5a88273b85f53b97c3db062428ccc
Size

184KB
Sample

221107-k8trpahdb4
MD5

4179c5ceb76a6af8eb98c14a5f535d27
SHA1

44dc2f65435dd11a1505f8113d994595a9d368d0
SHA256

ab7c1884205e0b4ff115dbd8b2faa90d51f5a88273b85f53b97c3db062428ccc
SHA512

6b206097b0bdaa5f58e52b28a72a7829d0abe6f5ff09fbd93030433364219cb3eb2618a55c2cc206d4d8c4eda755b5bc9307123237eeda0446a09ab15142da76
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO34I:/7BSH8zUB+nGESaaRvoB7FJNndn3I

Score

8^/10

Malware Config

Targets

- Target
  
  ab7c1884205e0b4ff115dbd8b2faa90d51f5a88273b85f53b97c3db062428ccc
- Size
  
  184KB
- MD5
  
  4179c5ceb76a6af8eb98c14a5f535d27
- SHA1
  
  44dc2f65435dd11a1505f8113d994595a9d368d0
- SHA256
  
  ab7c1884205e0b4ff115dbd8b2faa90d51f5a88273b85f53b97c3db062428ccc
- SHA512
  
  6b206097b0bdaa5f58e52b28a72a7829d0abe6f5ff09fbd93030433364219cb3eb2618a55c2cc206d4d8c4eda755b5bc9307123237eeda0446a09ab15142da76
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO34I:/7BSH8zUB+nGESaaRvoB7FJNndn3I
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2