ad621435703e30947928cd7542ef2003bd428cb50e436bd4c765dd0a67cb8e26 | Triage

Sharing

General

Target

ad621435703e30947928cd7542ef2003bd428cb50e436bd4c765dd0a67cb8e26
Size

184KB
Sample

221128-dftgwseb5v
MD5

04fd1f06098ddcabdef583509030d3c7
SHA1

2a6081e174c70a75d45613d4084fc1dd5048081a
SHA256

ad621435703e30947928cd7542ef2003bd428cb50e436bd4c765dd0a67cb8e26
SHA512

2db62979af85f5bea15e2b17416e2b0cc17702bd54b154a4177d2d0bda0cda396db0b382948a2e90c7ce81f81cb836b4edff21a3c9453c799acdc8ea537c3543
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3a:/7BSH8zUB+nGESaaRvoB7FJNndnf

Score

8^/10

Malware Config

Targets

- Target
  
  ad621435703e30947928cd7542ef2003bd428cb50e436bd4c765dd0a67cb8e26
- Size
  
  184KB
- MD5
  
  04fd1f06098ddcabdef583509030d3c7
- SHA1
  
  2a6081e174c70a75d45613d4084fc1dd5048081a
- SHA256
  
  ad621435703e30947928cd7542ef2003bd428cb50e436bd4c765dd0a67cb8e26
- SHA512
  
  2db62979af85f5bea15e2b17416e2b0cc17702bd54b154a4177d2d0bda0cda396db0b382948a2e90c7ce81f81cb836b4edff21a3c9453c799acdc8ea537c3543
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3a:/7BSH8zUB+nGESaaRvoB7FJNndnf
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2