6339fd72bc86b79d75030cd3bbdfe9a66ea6a902f059940bfb6ff8ee56b33438 | Triage

Sharing

General

Target

6339fd72bc86b79d75030cd3bbdfe9a66ea6a902f059940bfb6ff8ee56b33438
Size

1.5MB
Sample

221125-mwpnbaeh8x
MD5

30ff2e9563a335b1db481872fce586bc
SHA1

2d9884a835521ea7dedbfbf1987a16aa9d257e1c
SHA256

6339fd72bc86b79d75030cd3bbdfe9a66ea6a902f059940bfb6ff8ee56b33438
SHA512

a24925915a30e9758576551491c8940379f910a2b06dd43da2075e850c835a1bff67734de004947660155e0f9f4bff984e672416b1ddfcb8556a05a4f616fc93
SSDEEP

24576:3pa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG:AcZC35VcOcmDcc6Cd

Score

7^/10

Malware Config

Targets

- Target
  
  6339fd72bc86b79d75030cd3bbdfe9a66ea6a902f059940bfb6ff8ee56b33438
- Size
  
  1.5MB
- MD5
  
  30ff2e9563a335b1db481872fce586bc
- SHA1
  
  2d9884a835521ea7dedbfbf1987a16aa9d257e1c
- SHA256
  
  6339fd72bc86b79d75030cd3bbdfe9a66ea6a902f059940bfb6ff8ee56b33438
- SHA512
  
  a24925915a30e9758576551491c8940379f910a2b06dd43da2075e850c835a1bff67734de004947660155e0f9f4bff984e672416b1ddfcb8556a05a4f616fc93
- SSDEEP
  
  24576:3pa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eG:AcZC35VcOcmDcc6Cd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2