17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b | Triage

Sharing

General

Target

17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b
Size

160KB
Sample

221123-ln5twsfc61
MD5

9faf3034ec3ee4dba75812f5afc41022
SHA1

71dc5de9d14242b660a62e6ca5178493f3c7d2de
SHA256

17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b
SHA512

b351698b67b03b2fa56f202dc5eed06f326b9ead2997d335b9a7022901d9538e6f131f28e0307fe98527c621265e22c7307ebad0387a849c42903e48bcf7245e
SSDEEP

3072:8sDV6Az1lWgFvYGnJd9KpZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd9KpZV3uTN9WU/G9h2w591

Score

7^/10

Malware Config

Targets

- Target
  
  17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b
- Size
  
  160KB
- MD5
  
  9faf3034ec3ee4dba75812f5afc41022
- SHA1
  
  71dc5de9d14242b660a62e6ca5178493f3c7d2de
- SHA256
  
  17ad6fab46d2dd310d35431212a076fe86a7a41df5b0200f12ef9a64295c530b
- SHA512
  
  b351698b67b03b2fa56f202dc5eed06f326b9ead2997d335b9a7022901d9538e6f131f28e0307fe98527c621265e22c7307ebad0387a849c42903e48bcf7245e
- SSDEEP
  
  3072:8sDV6Az1lWgFvYGnJd9KpZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd9KpZV3uTN9WU/G9h2w591
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2