f4d11f8fc41642dbfd31068e73e0f484447452b629d216088ff86077d854f5f7 | Triage

Sharing

General

Target

f4d11f8fc41642dbfd31068e73e0f484447452b629d216088ff86077d854f5f7
Size

1.5MB
Sample

221123-www7tsdb53
MD5

91dce3d1046fb50b3f5c3b4fe5f41403
SHA1

4582eca101eedb886e219814c1bae505d0bd9638
SHA256

f4d11f8fc41642dbfd31068e73e0f484447452b629d216088ff86077d854f5f7
SHA512

d790f26b815dbadf37348bd182292e9dca32aa1815e890b3567516212d9b6619d2dcdf1eb1bda4df286310022c6c3ff7f84a6f5f3fa61685b03aa4012d391ed0
SSDEEP

24576:npa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG:QcZC35VcOcmDcc6Cd

Score

7^/10

Malware Config

Targets

- Target
  
  f4d11f8fc41642dbfd31068e73e0f484447452b629d216088ff86077d854f5f7
- Size
  
  1.5MB
- MD5
  
  91dce3d1046fb50b3f5c3b4fe5f41403
- SHA1
  
  4582eca101eedb886e219814c1bae505d0bd9638
- SHA256
  
  f4d11f8fc41642dbfd31068e73e0f484447452b629d216088ff86077d854f5f7
- SHA512
  
  d790f26b815dbadf37348bd182292e9dca32aa1815e890b3567516212d9b6619d2dcdf1eb1bda4df286310022c6c3ff7f84a6f5f3fa61685b03aa4012d391ed0
- SSDEEP
  
  24576:npa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG:QcZC35VcOcmDcc6Cd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2