f601d88dcf31cdac69ab3d651a303347f554cd1da4a3956fba49ed7982184660 | Triage

Sharing

General

Target

f601d88dcf31cdac69ab3d651a303347f554cd1da4a3956fba49ed7982184660
Size

1.5MB
Sample

221125-mh61faeb21
MD5

2cba0c7fe47c08230264ff4d76dbe548
SHA1

69af2da8ee608e6f016cbb8c9b7de1a84c21b522
SHA256

f601d88dcf31cdac69ab3d651a303347f554cd1da4a3956fba49ed7982184660
SHA512

75471b05a4d050a5133ec58564b451c54117df616e4f5f7f038e7aae19f2a34ff61a9b6d2a08627cac1317573e71608525de1a336c09f776fe61f3d3cc1cd13a
SSDEEP

24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eGE:wcZC35VcOcmDcc6Cdm

Score

7^/10

Malware Config

Targets

- Target
  
  f601d88dcf31cdac69ab3d651a303347f554cd1da4a3956fba49ed7982184660
- Size
  
  1.5MB
- MD5
  
  2cba0c7fe47c08230264ff4d76dbe548
- SHA1
  
  69af2da8ee608e6f016cbb8c9b7de1a84c21b522
- SHA256
  
  f601d88dcf31cdac69ab3d651a303347f554cd1da4a3956fba49ed7982184660
- SHA512
  
  75471b05a4d050a5133ec58564b451c54117df616e4f5f7f038e7aae19f2a34ff61a9b6d2a08627cac1317573e71608525de1a336c09f776fe61f3d3cc1cd13a
- SSDEEP
  
  24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eGE:wcZC35VcOcmDcc6Cdm
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2