d98228935ae9082cebc0e9b5225172e12d739e6cbabc7b3d67e3dc01878895b6 | Triage

Sharing

General

Target

d98228935ae9082cebc0e9b5225172e12d739e6cbabc7b3d67e3dc01878895b6
Size

128KB
Sample

221129-vga6dabc6z
MD5

029e3d705d56e06c685836ad90a6809f
SHA1

5ce98c2322846d5d1a2982fbf4e92bc383d29f71
SHA256

d98228935ae9082cebc0e9b5225172e12d739e6cbabc7b3d67e3dc01878895b6
SHA512

bc3f5cf78c29802e61fdd1a1395c59883eb95126b36f64e4660baddef8a794f8947ada3a5cab26d8df6d47759b167fc7deb5ae9c22eb855d55a7f15c5450a7e8
SSDEEP

1536:wHgC0CVJjxoCofvf1C0TgRvuWBvmtpEH2PRlogRmf1CSb/vclwtUBQUWu9pY/oeo:AgYlJiDrCecEPoicvXt3UPi176iOi

Score

7^/10

Malware Config

Targets

- Target
  
  d98228935ae9082cebc0e9b5225172e12d739e6cbabc7b3d67e3dc01878895b6
- Size
  
  128KB
- MD5
  
  029e3d705d56e06c685836ad90a6809f
- SHA1
  
  5ce98c2322846d5d1a2982fbf4e92bc383d29f71
- SHA256
  
  d98228935ae9082cebc0e9b5225172e12d739e6cbabc7b3d67e3dc01878895b6
- SHA512
  
  bc3f5cf78c29802e61fdd1a1395c59883eb95126b36f64e4660baddef8a794f8947ada3a5cab26d8df6d47759b167fc7deb5ae9c22eb855d55a7f15c5450a7e8
- SSDEEP
  
  1536:wHgC0CVJjxoCofvf1C0TgRvuWBvmtpEH2PRlogRmf1CSb/vclwtUBQUWu9pY/oeo:AgYlJiDrCecEPoicvXt3UPi176iOi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2