ab754bab930e990a2805df58655007c5b53719fb80876da4b19181853456143a | Triage

Sharing

General

Target

ab754bab930e990a2805df58655007c5b53719fb80876da4b19181853456143a
Size

192KB
Sample

221124-e2a34scc2v
MD5

535c2aa53cbc2fd19adea3d692a99f7c
SHA1

5ca6bfb56261dfd806a76671c7ed30242e07f167
SHA256

ab754bab930e990a2805df58655007c5b53719fb80876da4b19181853456143a
SHA512

b4f64dcbc38f77e94213161a3daea470f0f1d31fedab3fbae761f5c3e8599c04e2ac5e361acf484a0a16545d9bc43b79ae5dc0f4959c097acb2c575145921250
SSDEEP

3072:hhfh5rqxC1GcE38dDPAvD3nUms7A5zLADPTp8MMhtvxO/k//c78Zz:/rvGcE38dDPCD3nUmiA1Y6nvxO/kI

Score

8^/10

Malware Config

Targets

- Target
  
  ab754bab930e990a2805df58655007c5b53719fb80876da4b19181853456143a
- Size
  
  192KB
- MD5
  
  535c2aa53cbc2fd19adea3d692a99f7c
- SHA1
  
  5ca6bfb56261dfd806a76671c7ed30242e07f167
- SHA256
  
  ab754bab930e990a2805df58655007c5b53719fb80876da4b19181853456143a
- SHA512
  
  b4f64dcbc38f77e94213161a3daea470f0f1d31fedab3fbae761f5c3e8599c04e2ac5e361acf484a0a16545d9bc43b79ae5dc0f4959c097acb2c575145921250
- SSDEEP
  
  3072:hhfh5rqxC1GcE38dDPAvD3nUms7A5zLADPTp8MMhtvxO/k//c78Zz:/rvGcE38dDPCD3nUmiA1Y6nvxO/kI
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2