993f3ca57197b1a47adf464f599625fd65b1ec06d08887160aebfafa27ac8522 | Triage

Sharing

General

Target

993f3ca57197b1a47adf464f599625fd65b1ec06d08887160aebfafa27ac8522
Size

394KB
Sample

221126-26gg1scb38
MD5

4c6b88b2c0c75bf38d88826995a4204c
SHA1

08b3ade2efba22b5c758f42197dd642ae48138a9
SHA256

993f3ca57197b1a47adf464f599625fd65b1ec06d08887160aebfafa27ac8522
SHA512

8886ddeab05a97e1fa3f39b8132b9bb759a745d11d961f6c16497095861bc841a8ffa06db029158eccf74447eef0880e8ad30e0584d14e3cfb91c24380b099a6
SSDEEP

6144:DCm3gJX5z2ODOUlSZF64zfINQIVK7gAtqGIaH+5UpWPgPta/qe9xvAZZC/fREKGO:DeZ9/Tp2QfK7XfH+5zPgV3s6Zo5EK2G

Score

7^/10

Malware Config

Targets

- Target
  
  993f3ca57197b1a47adf464f599625fd65b1ec06d08887160aebfafa27ac8522
- Size
  
  394KB
- MD5
  
  4c6b88b2c0c75bf38d88826995a4204c
- SHA1
  
  08b3ade2efba22b5c758f42197dd642ae48138a9
- SHA256
  
  993f3ca57197b1a47adf464f599625fd65b1ec06d08887160aebfafa27ac8522
- SHA512
  
  8886ddeab05a97e1fa3f39b8132b9bb759a745d11d961f6c16497095861bc841a8ffa06db029158eccf74447eef0880e8ad30e0584d14e3cfb91c24380b099a6
- SSDEEP
  
  6144:DCm3gJX5z2ODOUlSZF64zfINQIVK7gAtqGIaH+5UpWPgPta/qe9xvAZZC/fREKGO:DeZ9/Tp2QfK7XfH+5zPgV3s6Zo5EK2G
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2