2a6f20f0749cb7fe7892e2835bcf5e37b6deadf115f2054cd58b54a8d7dc1819 | Triage

Sharing

General

Target

2a6f20f0749cb7fe7892e2835bcf5e37b6deadf115f2054cd58b54a8d7dc1819
Size

3.0MB
Sample

221129-scw6yaad92
MD5

9c563c0b4bfbb5ae06cf7323e5974c4a
SHA1

a2b10fed37ccf6381a8ec55a008acef75f4fc5dd
SHA256

2a6f20f0749cb7fe7892e2835bcf5e37b6deadf115f2054cd58b54a8d7dc1819
SHA512

094f11cf6e3d7301681cde5195c8e600fa4850ffdc131b370bfefba9222c57d81605b3852f40500838371dec5f1750a3e8979b73906cd91b97174b036588d9ad
SSDEEP

49152:fEoIlPFHG7xjp0g7nVY/ppd6CpgVuKv3lXYfy9/3Uq:879FHG7z0gcpL+usXYA/kq

Score

7^/10

Malware Config

Targets

- Target
  
  2a6f20f0749cb7fe7892e2835bcf5e37b6deadf115f2054cd58b54a8d7dc1819
- Size
  
  3.0MB
- MD5
  
  9c563c0b4bfbb5ae06cf7323e5974c4a
- SHA1
  
  a2b10fed37ccf6381a8ec55a008acef75f4fc5dd
- SHA256
  
  2a6f20f0749cb7fe7892e2835bcf5e37b6deadf115f2054cd58b54a8d7dc1819
- SHA512
  
  094f11cf6e3d7301681cde5195c8e600fa4850ffdc131b370bfefba9222c57d81605b3852f40500838371dec5f1750a3e8979b73906cd91b97174b036588d9ad
- SSDEEP
  
  49152:fEoIlPFHG7xjp0g7nVY/ppd6CpgVuKv3lXYfy9/3Uq:879FHG7z0gcpL+usXYA/kq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2