c0017ec7b8329e011f6dea666897f23fc9788853c0df3652b609d3395c977c0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0017ec7b8329e011f6dea666897f23fc9788853c0df3652b609d3395c977c0f
Size

1.5MB
Sample

221125-mnllpaba24
MD5

4b456d383b908bd831c55f759fc63e5d
SHA1

3c029bd2335ccb3221fb10a2c73fb4ece4bfcb6b
SHA256

c0017ec7b8329e011f6dea666897f23fc9788853c0df3652b609d3395c977c0f
SHA512

7e5c087e58fba1923804fb981dd6031bd91130f0a08a391f45647f7775742bdf85d72ccad513f6c2156eb728d17f4124777de98a193eb57e60b2b656c1b3e2e7
SSDEEP

24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG+:wcZC35VcOcmDcc6CdI

Score

7^/10

Malware Config

Targets

- Target
  
  c0017ec7b8329e011f6dea666897f23fc9788853c0df3652b609d3395c977c0f
- Size
  
  1.5MB
- MD5
  
  4b456d383b908bd831c55f759fc63e5d
- SHA1
  
  3c029bd2335ccb3221fb10a2c73fb4ece4bfcb6b
- SHA256
  
  c0017ec7b8329e011f6dea666897f23fc9788853c0df3652b609d3395c977c0f
- SHA512
  
  7e5c087e58fba1923804fb981dd6031bd91130f0a08a391f45647f7775742bdf85d72ccad513f6c2156eb728d17f4124777de98a193eb57e60b2b656c1b3e2e7
- SSDEEP
  
  24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG+:wcZC35VcOcmDcc6CdI
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2