11ea3f3562cd91d9068e5ee6bc78906450e8365a9cf1b187074a68e94510c49a | Triage

Sharing

General

Target

11ea3f3562cd91d9068e5ee6bc78906450e8365a9cf1b187074a68e94510c49a
Size

1.5MB
Sample

221125-m233wsca62
MD5

0d2ad44bbdc2e94bdfc5efebeb248c8e
SHA1

da4f7cfcdc8cc884e57d744419c2955a8e8941b2
SHA256

11ea3f3562cd91d9068e5ee6bc78906450e8365a9cf1b187074a68e94510c49a
SHA512

414ca76dcf986ebb3b432389a507186b6613fef545bb3f6ad0cee03ccad8308f380183dd551b3624d2de272876f317d789740f61e7044cfec2881f50596f82bd
SSDEEP

24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eGC:wcZC35VcOcmDcc6CdI

Score

7^/10

Malware Config

Targets

- Target
  
  11ea3f3562cd91d9068e5ee6bc78906450e8365a9cf1b187074a68e94510c49a
- Size
  
  1.5MB
- MD5
  
  0d2ad44bbdc2e94bdfc5efebeb248c8e
- SHA1
  
  da4f7cfcdc8cc884e57d744419c2955a8e8941b2
- SHA256
  
  11ea3f3562cd91d9068e5ee6bc78906450e8365a9cf1b187074a68e94510c49a
- SHA512
  
  414ca76dcf986ebb3b432389a507186b6613fef545bb3f6ad0cee03ccad8308f380183dd551b3624d2de272876f317d789740f61e7044cfec2881f50596f82bd
- SSDEEP
  
  24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eGC:wcZC35VcOcmDcc6CdI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2