f7b197b1d1bc3e9ab5dbf72342b6a54908e2786015bc1341f74c89f2c4faebc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7b197b1d1bc3e9ab5dbf72342b6a54908e2786015bc1341f74c89f2c4faebc4
Size

88KB
Sample

221121-r9742aed75
MD5

109e4e670db6033ab604d221bb270370
SHA1

408f260215bf1ee5e39ff5fe732e0c5b28c2a0e9
SHA256

f7b197b1d1bc3e9ab5dbf72342b6a54908e2786015bc1341f74c89f2c4faebc4
SHA512

de2aff5a359419bb04bb70f6a90e491dce62ae2f91af401b48670a6115931885c82fb8af7068a25db376d4b60fa4635757ae0036b978f8e1ce9b1fcb153ab8c4
SSDEEP

1536:pawyQ/ACrvt9PElorg8/iwHdk6SzuAatLfts4V0dVnjy+OnnUEu+cXgcbu:xt9Worg8/bHdk6SzuAatLfts4KVnjy+1

Score

7^/10

Malware Config

Targets

- Target
  
  f7b197b1d1bc3e9ab5dbf72342b6a54908e2786015bc1341f74c89f2c4faebc4
- Size
  
  88KB
- MD5
  
  109e4e670db6033ab604d221bb270370
- SHA1
  
  408f260215bf1ee5e39ff5fe732e0c5b28c2a0e9
- SHA256
  
  f7b197b1d1bc3e9ab5dbf72342b6a54908e2786015bc1341f74c89f2c4faebc4
- SHA512
  
  de2aff5a359419bb04bb70f6a90e491dce62ae2f91af401b48670a6115931885c82fb8af7068a25db376d4b60fa4635757ae0036b978f8e1ce9b1fcb153ab8c4
- SSDEEP
  
  1536:pawyQ/ACrvt9PElorg8/iwHdk6SzuAatLfts4V0dVnjy+OnnUEu+cXgcbu:xt9Worg8/bHdk6SzuAatLfts4KVnjy+1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2