989d185b44a90c517cb91880b18ececd8c9f4391245f5572d7cb32b95dd11d36 | Triage

Sharing

General

Target

989d185b44a90c517cb91880b18ececd8c9f4391245f5572d7cb32b95dd11d36
Size

492KB
Sample

221124-1rjs6abg55
MD5

7b975db0eab44098894af51289d1de3e
SHA1

e50cb9e8158d0cfdb1e548408c2429b2bb58e441
SHA256

989d185b44a90c517cb91880b18ececd8c9f4391245f5572d7cb32b95dd11d36
SHA512

996144a67a882505f96d64dec4690d074d420e9103f3a42eceb0bacdd96439254f9eaa38f6d9d3e54c2470ff33e26cb0274e419028c7d5dcb0ab0b204cf36caa
SSDEEP

6144:1xrODPXAkZEOp3iDvrpyd//9SAr5dbCRmywzc/wFnXKER0u+GIIIIIIIhIIIIIIA:1xrZ7pOTldbCRCikm5Q

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  989d185b44a90c517cb91880b18ececd8c9f4391245f5572d7cb32b95dd11d36
- Size
  
  492KB
- MD5
  
  7b975db0eab44098894af51289d1de3e
- SHA1
  
  e50cb9e8158d0cfdb1e548408c2429b2bb58e441
- SHA256
  
  989d185b44a90c517cb91880b18ececd8c9f4391245f5572d7cb32b95dd11d36
- SHA512
  
  996144a67a882505f96d64dec4690d074d420e9103f3a42eceb0bacdd96439254f9eaa38f6d9d3e54c2470ff33e26cb0274e419028c7d5dcb0ab0b204cf36caa
- SSDEEP
  
  6144:1xrODPXAkZEOp3iDvrpyd//9SAr5dbCRmywzc/wFnXKER0u+GIIIIIIIhIIIIIIA:1xrZ7pOTldbCRCikm5Q
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2