899fe6170de613c120c29d9bac3aba2c1b74c7177e4754be562bc4c29c8ac2e5 | Triage

Sharing

General

Target

899fe6170de613c120c29d9bac3aba2c1b74c7177e4754be562bc4c29c8ac2e5
Size

124KB
Sample

221123-wzrfradd33
MD5

5adee6d77b838a322255b3c8c4363a40
SHA1

411e609d7c3ca4e650b458dd1307cb334b97f292
SHA256

899fe6170de613c120c29d9bac3aba2c1b74c7177e4754be562bc4c29c8ac2e5
SHA512

674c87b6e5f195bc8e77501e92499b81ee46216956330bea193c52cebff66db5c475915066d4290983d1e330fd54cb32367a9cc6d09390448079245302f4352a
SSDEEP

3072:telXNPpgnqzM2beqB0S0UGXjHd+haE8mdkSz2:tuf3zj0S0UwQAE8mqSq

Score

7^/10

Malware Config

Targets

- Target
  
  899fe6170de613c120c29d9bac3aba2c1b74c7177e4754be562bc4c29c8ac2e5
- Size
  
  124KB
- MD5
  
  5adee6d77b838a322255b3c8c4363a40
- SHA1
  
  411e609d7c3ca4e650b458dd1307cb334b97f292
- SHA256
  
  899fe6170de613c120c29d9bac3aba2c1b74c7177e4754be562bc4c29c8ac2e5
- SHA512
  
  674c87b6e5f195bc8e77501e92499b81ee46216956330bea193c52cebff66db5c475915066d4290983d1e330fd54cb32367a9cc6d09390448079245302f4352a
- SSDEEP
  
  3072:telXNPpgnqzM2beqB0S0UGXjHd+haE8mdkSz2:tuf3zj0S0UwQAE8mqSq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2