acf8af83ab9e6c02d7d268c4ea634ef0a17d35dd67d7b5d607b92dd98f0461dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acf8af83ab9e6c02d7d268c4ea634ef0a17d35dd67d7b5d607b92dd98f0461dd
Size

184KB
Sample

221128-hmqrsshe21
MD5

3ea5de0310b7e71de7424760e1ca47e4
SHA1

62a3a0e3512e604781fc41a4c552d7a3a957bc99
SHA256

acf8af83ab9e6c02d7d268c4ea634ef0a17d35dd67d7b5d607b92dd98f0461dd
SHA512

8117f2647812815c247b0f58d5cc51d98178b8c02d82e3199d2e5f4499312e418018fe57b4f80628e35ec705f00b7f6085b907a77cdb2dbbee7751881fb5bea4
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3I:/7BSH8zUB+nGESaaRvoB7FJNndn5

Score

8^/10

Malware Config

Targets

- Target
  
  acf8af83ab9e6c02d7d268c4ea634ef0a17d35dd67d7b5d607b92dd98f0461dd
- Size
  
  184KB
- MD5
  
  3ea5de0310b7e71de7424760e1ca47e4
- SHA1
  
  62a3a0e3512e604781fc41a4c552d7a3a957bc99
- SHA256
  
  acf8af83ab9e6c02d7d268c4ea634ef0a17d35dd67d7b5d607b92dd98f0461dd
- SHA512
  
  8117f2647812815c247b0f58d5cc51d98178b8c02d82e3199d2e5f4499312e418018fe57b4f80628e35ec705f00b7f6085b907a77cdb2dbbee7751881fb5bea4
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3I:/7BSH8zUB+nGESaaRvoB7FJNndn5
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2