abf78f5c0844677e7e9a68da64c01e00db0545c267daf161361e74b6587be94e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf78f5c0844677e7e9a68da64c01e00db0545c267daf161361e74b6587be94e
Size

184KB
Sample

221124-d7112saa4z
MD5

3a62adc94411f7c013ec53ba1012bb11
SHA1

d7a73664f20c6a67a14bf20fed1940ed731a4bc3
SHA256

abf78f5c0844677e7e9a68da64c01e00db0545c267daf161361e74b6587be94e
SHA512

624af9399c6a23750a63b9723f13958b3a5fdac2282b8242952e14729ad2a63c52f8e22015b5b778d669689f84923adf9200a7f42f3c0b02b9d2c803d6a343d0
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3n:/7BSH8zUB+nGESaaRvoB7FJNndna

Score

8^/10

Malware Config

Targets

- Target
  
  abf78f5c0844677e7e9a68da64c01e00db0545c267daf161361e74b6587be94e
- Size
  
  184KB
- MD5
  
  3a62adc94411f7c013ec53ba1012bb11
- SHA1
  
  d7a73664f20c6a67a14bf20fed1940ed731a4bc3
- SHA256
  
  abf78f5c0844677e7e9a68da64c01e00db0545c267daf161361e74b6587be94e
- SHA512
  
  624af9399c6a23750a63b9723f13958b3a5fdac2282b8242952e14729ad2a63c52f8e22015b5b778d669689f84923adf9200a7f42f3c0b02b9d2c803d6a343d0
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3n:/7BSH8zUB+nGESaaRvoB7FJNndna
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2