f1b82cbc11454c341faafe19e9ff4748139fe192cf7c9ef4ab5182b1192d0239 | Triage

Sharing

General

Target

f1b82cbc11454c341faafe19e9ff4748139fe192cf7c9ef4ab5182b1192d0239
Size

160KB
Sample

221123-ln4ltsfc6z
MD5

021d5029a108aae8bc0cb6a363327c44
SHA1

a9b8a48fc5a0cf881127b846097591fd688c9d80
SHA256

f1b82cbc11454c341faafe19e9ff4748139fe192cf7c9ef4ab5182b1192d0239
SHA512

b9fd46735e7cb45020bca6ac86d6787a215621bc00cc8d53ac3074bb32a10e776a33054335d3d57ebd75ed9f3e7d00bc154674fe5e82e27dbd7e19a95fdd6e3b
SSDEEP

3072:8sDV6Az1aWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQAtgFvYGJd6KpZV3uTN9WU/G9h2w59X

Score

7^/10

Malware Config

Targets

- Target
  
  f1b82cbc11454c341faafe19e9ff4748139fe192cf7c9ef4ab5182b1192d0239
- Size
  
  160KB
- MD5
  
  021d5029a108aae8bc0cb6a363327c44
- SHA1
  
  a9b8a48fc5a0cf881127b846097591fd688c9d80
- SHA256
  
  f1b82cbc11454c341faafe19e9ff4748139fe192cf7c9ef4ab5182b1192d0239
- SHA512
  
  b9fd46735e7cb45020bca6ac86d6787a215621bc00cc8d53ac3074bb32a10e776a33054335d3d57ebd75ed9f3e7d00bc154674fe5e82e27dbd7e19a95fdd6e3b
- SSDEEP
  
  3072:8sDV6Az1aWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQAtgFvYGJd6KpZV3uTN9WU/G9h2w59X
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2