44f5d8791196affa766761fc60240311320c0fb7d2b08e6844a2441dd538f208 | Triage

Sharing

General

Target

44f5d8791196affa766761fc60240311320c0fb7d2b08e6844a2441dd538f208
Size

218KB
Sample

221127-tnksqaed5w
MD5

1a61acc8b96e9496309d60df1577629a
SHA1

adde42aef2a2568add5b16e6c915141987ce4cec
SHA256

44f5d8791196affa766761fc60240311320c0fb7d2b08e6844a2441dd538f208
SHA512

c9254a31d939e209e4bbda43f2f3323c7017fb862a78f13bf2b59e745c4f83954e442d31d42fba4a0bd51200e9cc8919a8cf9b5a19ccad690ff16379fac01641
SSDEEP

6144:OAhQb4cTwA0Bw44fQwK5SYv70SwTnb2Et:Ob4cTP0KJY5SYv70VTSEt

Score

7^/10

Malware Config

Targets

- Target
  
  Curriculo_16-12-2014_com_foto.EXE
- Size
  
  225KB
- MD5
  
  08f7c8d1094f0654318bd0c840c60767
- SHA1
  
  d7a6b244ed5ec090ed2877e32c2866b9119b34fd
- SHA256
  
  dc37f296876c1f813846a8285b8ad16c8c0426ebbe1a6e0ee753a90b8b5b3d66
- SHA512
  
  8f24028f6f55da4ccfa8cc70f93941434e6446260130986adfc03c7c7309381332853ab12489f98f3d9b8715327abc06fc6836037a0262d1f8d480b7cbc106c8
- SSDEEP
  
  3072:aFedCIIANhf0BPzqoTMD4RCRiq0YTaOlkwK5SYFiI+eTOSwdGsjWfHD1pTUaTKri:aAUDa0BwE4BQwK5SYF70SwYfjsaq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2