ad851753970f61f6221f6f9bd33d125f0dc5e5ddad8ffbca270191116e39991e | Triage

Sharing

General

Target

ad851753970f61f6221f6f9bd33d125f0dc5e5ddad8ffbca270191116e39991e
Size

191KB
Sample

221128-by1mtadh79
MD5

7d3080389975577d64827c039a952fb5
SHA1

b628dfd64704dee3136a0bdcd92b0f5748b772a6
SHA256

ad851753970f61f6221f6f9bd33d125f0dc5e5ddad8ffbca270191116e39991e
SHA512

3cce3074261002927f4256bb7136222f0b67507c9f9bbd69c15d02230238b7ec912c42fa04b9747688a3bb59401e941aeb84d83e5327db77a21a5fe411e7571c
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0da:HAVySV1eY4k437d+4wkTHdS2i

Score

7^/10

Malware Config

Targets

- Target
  
  ad851753970f61f6221f6f9bd33d125f0dc5e5ddad8ffbca270191116e39991e
- Size
  
  191KB
- MD5
  
  7d3080389975577d64827c039a952fb5
- SHA1
  
  b628dfd64704dee3136a0bdcd92b0f5748b772a6
- SHA256
  
  ad851753970f61f6221f6f9bd33d125f0dc5e5ddad8ffbca270191116e39991e
- SHA512
  
  3cce3074261002927f4256bb7136222f0b67507c9f9bbd69c15d02230238b7ec912c42fa04b9747688a3bb59401e941aeb84d83e5327db77a21a5fe411e7571c
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0da:HAVySV1eY4k437d+4wkTHdS2i
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2