75d23d0f1e083d985e77326cc8f2be71b8013c4ed78819cda468f341573a164c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75d23d0f1e083d985e77326cc8f2be71b8013c4ed78819cda468f341573a164c
Size

50KB
Sample

221123-ymqpssae83
MD5

528a7fb52574bfa548ffcde5c4f543cc
SHA1

c33015654e2841bea861341ef523b702fbc5521b
SHA256

75d23d0f1e083d985e77326cc8f2be71b8013c4ed78819cda468f341573a164c
SHA512

eb773e0c8d73a45385ec0b1af79d3c56625d42be3da17e00497953454c6eca6f65346c6b3a3e441f1f9df356a6d766ce19c8b580918895c637061e330c54d6e1
SSDEEP

1536:gPCVdpqkxfCpgN28vebp7zi4kx0ozHyP:gPCHRxfBzeW0ozS

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  75d23d0f1e083d985e77326cc8f2be71b8013c4ed78819cda468f341573a164c
- Size
  
  50KB
- MD5
  
  528a7fb52574bfa548ffcde5c4f543cc
- SHA1
  
  c33015654e2841bea861341ef523b702fbc5521b
- SHA256
  
  75d23d0f1e083d985e77326cc8f2be71b8013c4ed78819cda468f341573a164c
- SHA512
  
  eb773e0c8d73a45385ec0b1af79d3c56625d42be3da17e00497953454c6eca6f65346c6b3a3e441f1f9df356a6d766ce19c8b580918895c637061e330c54d6e1
- SSDEEP
  
  1536:gPCVdpqkxfCpgN28vebp7zi4kx0ozHyP:gPCHRxfBzeW0ozS
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2