ba4b654c3c5e50d42bb8caab39e80a32da6a30a50de4cc232720406bb644ddb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba4b654c3c5e50d42bb8caab39e80a32da6a30a50de4cc232720406bb644ddb9
Size

100KB
Sample

221107-y627yagbe8
MD5

0f2683a61828e596d8056e4444b918e0
SHA1

c5bfc7dd231b9e455e638a0f794cd0828c4284a5
SHA256

ba4b654c3c5e50d42bb8caab39e80a32da6a30a50de4cc232720406bb644ddb9
SHA512

e6e5aa0ca448ab5c43818d7fbfd0f15f34a3d8cc41338f21e639f2f079afd03a411cd8fcbaf435e2ea8f2d145b43d1bf24a36f7d4d5970048cbf03b3f4f76fc9
SSDEEP

1536:d2uJzWFivWgCTESNx0ksS+wfPHunFl8D1B:7pqivWgCT9Y8D1

Score

7^/10

Malware Config

Targets

- Target
  
  ba4b654c3c5e50d42bb8caab39e80a32da6a30a50de4cc232720406bb644ddb9
- Size
  
  100KB
- MD5
  
  0f2683a61828e596d8056e4444b918e0
- SHA1
  
  c5bfc7dd231b9e455e638a0f794cd0828c4284a5
- SHA256
  
  ba4b654c3c5e50d42bb8caab39e80a32da6a30a50de4cc232720406bb644ddb9
- SHA512
  
  e6e5aa0ca448ab5c43818d7fbfd0f15f34a3d8cc41338f21e639f2f079afd03a411cd8fcbaf435e2ea8f2d145b43d1bf24a36f7d4d5970048cbf03b3f4f76fc9
- SSDEEP
  
  1536:d2uJzWFivWgCTESNx0ksS+wfPHunFl8D1B:7pqivWgCT9Y8D1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2