1f00035aa6dbba3e9a6b7dfb7ae781ea6edaa2580d97b586c3beff9755be8db2 | Triage

Sharing

General

Target

1f00035aa6dbba3e9a6b7dfb7ae781ea6edaa2580d97b586c3beff9755be8db2
Size

13KB
Sample

221124-pwybkadh44
MD5

1e60a1b1ddd146f169e5b749554566dc
SHA1

7149e3683bab8a2bcd3da05e1a179b92a280089c
SHA256

1f00035aa6dbba3e9a6b7dfb7ae781ea6edaa2580d97b586c3beff9755be8db2
SHA512

9a3424dc7d65261b1aef695cde43c95fbfeb6e5d6fc7fa388044b6acd8c2643049b8bee74dab649132e0ad9eddee5e04ec98ccf800bcfb26cbdd32f87f92ebad
SSDEEP

384:tzzVqiGagRYwZSFFOECXCghDSHXWmZg1r+9f7qN:tzxqagRYwZSGECXCgMmsgV/N

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  1f00035aa6dbba3e9a6b7dfb7ae781ea6edaa2580d97b586c3beff9755be8db2
- Size
  
  13KB
- MD5
  
  1e60a1b1ddd146f169e5b749554566dc
- SHA1
  
  7149e3683bab8a2bcd3da05e1a179b92a280089c
- SHA256
  
  1f00035aa6dbba3e9a6b7dfb7ae781ea6edaa2580d97b586c3beff9755be8db2
- SHA512
  
  9a3424dc7d65261b1aef695cde43c95fbfeb6e5d6fc7fa388044b6acd8c2643049b8bee74dab649132e0ad9eddee5e04ec98ccf800bcfb26cbdd32f87f92ebad
- SSDEEP
  
  384:tzzVqiGagRYwZSFFOECXCghDSHXWmZg1r+9f7qN:tzxqagRYwZSGECXCgMmsgV/N
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2