73b9f20e45050ddac888a8fc53be2023393b49b8343ed721d44461fab739d349 | Triage

Sharing

General

Target

73b9f20e45050ddac888a8fc53be2023393b49b8343ed721d44461fab739d349
Size

21KB
Sample

221122-jptf5see84
MD5

4fa9e799040df3b7131e264b32a8cfd6
SHA1

770c5c1d01677afca31515a9a9bbe520f41a1060
SHA256

73b9f20e45050ddac888a8fc53be2023393b49b8343ed721d44461fab739d349
SHA512

64dc76b9cc0dd42094db0621d369c252e7e06f431f5ee2d5d5a8041db544700f89897aea4f9c031da7a62156b2835b311a6c56d1e6a359083576b8719f9b8f18
SSDEEP

384:OGLvGoN8npeUWozguegkwZNDI3ku6ZRpesDuxqQ:Xvinpe3tgkmdEl0LKxx

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  73b9f20e45050ddac888a8fc53be2023393b49b8343ed721d44461fab739d349
- Size
  
  21KB
- MD5
  
  4fa9e799040df3b7131e264b32a8cfd6
- SHA1
  
  770c5c1d01677afca31515a9a9bbe520f41a1060
- SHA256
  
  73b9f20e45050ddac888a8fc53be2023393b49b8343ed721d44461fab739d349
- SHA512
  
  64dc76b9cc0dd42094db0621d369c252e7e06f431f5ee2d5d5a8041db544700f89897aea4f9c031da7a62156b2835b311a6c56d1e6a359083576b8719f9b8f18
- SSDEEP
  
  384:OGLvGoN8npeUWozguegkwZNDI3ku6ZRpesDuxqQ:Xvinpe3tgkmdEl0LKxx
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2