e20ce4778b0354b322a4037a7c2a1ade5a3f8bdc0cdea47f4164cb8e77380f19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e20ce4778b0354b322a4037a7c2a1ade5a3f8bdc0cdea47f4164cb8e77380f19
Size

180KB
Sample

221121-qdj7nabb63
MD5

39a2d48d5deac947faca65c15d343760
SHA1

05c694aaf5bf4ef54d376b21475c9e60a078f95d
SHA256

e20ce4778b0354b322a4037a7c2a1ade5a3f8bdc0cdea47f4164cb8e77380f19
SHA512

2b21d69d3bf7d9a3284334d7da399bfa1ff9c6f9b9770d4924601929838c743928758f85b9cbe702697321e5cfd0720f6ed8081e469ab46cc8cff18618ba5bfc
SSDEEP

3072:pwxVMhOC/dTDbq91+mno3t4QZQ3rh2TTNTJTCN5gTGhSkT5dgsUGOgkBFVYbsVTo:pTfFDbRnOTr085p8mkJA

Score

7^/10

Malware Config

Targets

- Target
  
  e20ce4778b0354b322a4037a7c2a1ade5a3f8bdc0cdea47f4164cb8e77380f19
- Size
  
  180KB
- MD5
  
  39a2d48d5deac947faca65c15d343760
- SHA1
  
  05c694aaf5bf4ef54d376b21475c9e60a078f95d
- SHA256
  
  e20ce4778b0354b322a4037a7c2a1ade5a3f8bdc0cdea47f4164cb8e77380f19
- SHA512
  
  2b21d69d3bf7d9a3284334d7da399bfa1ff9c6f9b9770d4924601929838c743928758f85b9cbe702697321e5cfd0720f6ed8081e469ab46cc8cff18618ba5bfc
- SSDEEP
  
  3072:pwxVMhOC/dTDbq91+mno3t4QZQ3rh2TTNTJTCN5gTGhSkT5dgsUGOgkBFVYbsVTo:pTfFDbRnOTr085p8mkJA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2