1adcf15e8ba25a6c5d53ebfb8c150de5e9e0207aed91272828c1dd7fea82da64 | Triage

Sharing

General

Target

1adcf15e8ba25a6c5d53ebfb8c150de5e9e0207aed91272828c1dd7fea82da64
Size

124KB
Sample

221123-xbzynaee64
MD5

4c705e48bda8cc223db9c270817cf8e0
SHA1

28c6660f86fa1d13702cdf16db4589543ac9559e
SHA256

1adcf15e8ba25a6c5d53ebfb8c150de5e9e0207aed91272828c1dd7fea82da64
SHA512

d3761a283d19a273db1b7a5dc5bddf767e079b35d86f65bb77806ad738a3ff3d693478bed450d590f998d29d15a6224dc0c07e9aa5e0c304c8a16b0a03b2ab19
SSDEEP

3072:yJByLatMX+BALyV0f2JoTm1eCCberkoav0s:kSatMX+BALyV0f2JoTm1eCeWA

Score

7^/10

Malware Config

Targets

- Target
  
  1adcf15e8ba25a6c5d53ebfb8c150de5e9e0207aed91272828c1dd7fea82da64
- Size
  
  124KB
- MD5
  
  4c705e48bda8cc223db9c270817cf8e0
- SHA1
  
  28c6660f86fa1d13702cdf16db4589543ac9559e
- SHA256
  
  1adcf15e8ba25a6c5d53ebfb8c150de5e9e0207aed91272828c1dd7fea82da64
- SHA512
  
  d3761a283d19a273db1b7a5dc5bddf767e079b35d86f65bb77806ad738a3ff3d693478bed450d590f998d29d15a6224dc0c07e9aa5e0c304c8a16b0a03b2ab19
- SSDEEP
  
  3072:yJByLatMX+BALyV0f2JoTm1eCCberkoav0s:kSatMX+BALyV0f2JoTm1eCeWA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2