General

  • Target

    abe7944835620766743334364605fcfabd35d2d3802975fc59a1307a8a871f53

  • Size

    184KB

  • Sample

    221124-etqtlabf8t

  • MD5

    8f31ecfc1b23b82860635320315e2f8c

  • SHA1

    c9c05a28e3c545a9d0baaff3b0ec8056d3948161

  • SHA256

    abe7944835620766743334364605fcfabd35d2d3802975fc59a1307a8a871f53

  • SHA512

    13cf4b4af1ce1dd7f4f0ca60e9cba922915a01bed0d36e8362db34336a646a4c3e6df4d9f19102ce4ea55fa949e4c0320c15c40597794b7c365a201832e2ae73

  • SSDEEP

    3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO32W:/7BSH8zUB+nGESaaRvoB7FJNndne

Score
8/10

Malware Config

Targets

    • Target

      abe7944835620766743334364605fcfabd35d2d3802975fc59a1307a8a871f53

    • Size

      184KB

    • MD5

      8f31ecfc1b23b82860635320315e2f8c

    • SHA1

      c9c05a28e3c545a9d0baaff3b0ec8056d3948161

    • SHA256

      abe7944835620766743334364605fcfabd35d2d3802975fc59a1307a8a871f53

    • SHA512

      13cf4b4af1ce1dd7f4f0ca60e9cba922915a01bed0d36e8362db34336a646a4c3e6df4d9f19102ce4ea55fa949e4c0320c15c40597794b7c365a201832e2ae73

    • SSDEEP

      3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO32W:/7BSH8zUB+nGESaaRvoB7FJNndne

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks