966fe894f93e9d57ad9ed974d8a35cbc04ce610bd36316ca7d6a919db18fb000 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

966fe894f93e9d57ad9ed974d8a35cbc04ce610bd36316ca7d6a919db18fb000
Size

143KB
Sample

221127-sdxtvsba3x
MD5

bb5827a533cc2a945e90a024317a4431
SHA1

d4e6fbd96a3cb2a1146f0c0b348de308245837d3
SHA256

966fe894f93e9d57ad9ed974d8a35cbc04ce610bd36316ca7d6a919db18fb000
SHA512

e04a2f6ac637fd9db8968c74132b02be912413d61cb607bd3169ac81f2929611423364e363e20576a21974e348f876f2bc2a61567213cb07419325ea52c6ec6c
SSDEEP

3072:iN6ZekwVJIlgps5q9Eb648qwlS/+TfQO45D6w:pe9IB83ID5ew

Score

7^/10

Malware Config

Targets

- Target
  
  966fe894f93e9d57ad9ed974d8a35cbc04ce610bd36316ca7d6a919db18fb000
- Size
  
  143KB
- MD5
  
  bb5827a533cc2a945e90a024317a4431
- SHA1
  
  d4e6fbd96a3cb2a1146f0c0b348de308245837d3
- SHA256
  
  966fe894f93e9d57ad9ed974d8a35cbc04ce610bd36316ca7d6a919db18fb000
- SHA512
  
  e04a2f6ac637fd9db8968c74132b02be912413d61cb607bd3169ac81f2929611423364e363e20576a21974e348f876f2bc2a61567213cb07419325ea52c6ec6c
- SSDEEP
  
  3072:iN6ZekwVJIlgps5q9Eb648qwlS/+TfQO45D6w:pe9IB83ID5ew
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2