ac4c1b69fea6b6e04b043b4ffdd8449b2998b9309bda0336257ab7c7c0fd7dd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac4c1b69fea6b6e04b043b4ffdd8449b2998b9309bda0336257ab7c7c0fd7dd2
Size

60KB
Sample

221121-r8wdvahh4s
MD5

365050c8f7e26926e2ad9df999aa3520
SHA1

be33ab3867d1f3e9363440943605a14fd9b408fc
SHA256

ac4c1b69fea6b6e04b043b4ffdd8449b2998b9309bda0336257ab7c7c0fd7dd2
SHA512

35adc8322f9404d4da602a02ec29547108301435eb1e895cbdc7016eda00d13fa3933b97957b3f6f63010bf6e44c380dc44aad6e18b658003f3520567fbc2a3a
SSDEEP

768:6R1tFltsq6G087m9kkewnowfd00hXXofDpqFHz/YBvAPu:Y1tFltsZG0Roy3XobpCTMY

Score

7^/10

Malware Config

Targets

- Target
  
  ac4c1b69fea6b6e04b043b4ffdd8449b2998b9309bda0336257ab7c7c0fd7dd2
- Size
  
  60KB
- MD5
  
  365050c8f7e26926e2ad9df999aa3520
- SHA1
  
  be33ab3867d1f3e9363440943605a14fd9b408fc
- SHA256
  
  ac4c1b69fea6b6e04b043b4ffdd8449b2998b9309bda0336257ab7c7c0fd7dd2
- SHA512
  
  35adc8322f9404d4da602a02ec29547108301435eb1e895cbdc7016eda00d13fa3933b97957b3f6f63010bf6e44c380dc44aad6e18b658003f3520567fbc2a3a
- SSDEEP
  
  768:6R1tFltsq6G087m9kkewnowfd00hXXofDpqFHz/YBvAPu:Y1tFltsZG0Roy3XobpCTMY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2