d1ab3509731831258e888e08d5cafb33ee7f0f776acb2b748fa72c6c5282252f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1ab3509731831258e888e08d5cafb33ee7f0f776acb2b748fa72c6c5282252f
Size

72KB
Sample

221201-2hr9lsca6s
MD5

b28414fcb3a392c9c5f27884aaab69c6
SHA1

aa02db3bbc17d414f66b2eee2f6a9499d484040f
SHA256

d1ab3509731831258e888e08d5cafb33ee7f0f776acb2b748fa72c6c5282252f
SHA512

66793d66aaa930773f9f3f569514329cbb5faa37f1c428a8ad94c492bd31a3522df6c79b5c57e3353c0d44a5d09dd47fc426d8295dd50441b4cd109cb8f9bd4b
SSDEEP

768:hX8yiGi1sEEf2yltdNs4xlZpB1OkCJJBZDQirD51Ro6zbNKVP9LP7u:tv64HnCD3DQWDXRo6zb2LP

Score

7^/10

Malware Config

Targets

- Target
  
  d1ab3509731831258e888e08d5cafb33ee7f0f776acb2b748fa72c6c5282252f
- Size
  
  72KB
- MD5
  
  b28414fcb3a392c9c5f27884aaab69c6
- SHA1
  
  aa02db3bbc17d414f66b2eee2f6a9499d484040f
- SHA256
  
  d1ab3509731831258e888e08d5cafb33ee7f0f776acb2b748fa72c6c5282252f
- SHA512
  
  66793d66aaa930773f9f3f569514329cbb5faa37f1c428a8ad94c492bd31a3522df6c79b5c57e3353c0d44a5d09dd47fc426d8295dd50441b4cd109cb8f9bd4b
- SSDEEP
  
  768:hX8yiGi1sEEf2yltdNs4xlZpB1OkCJJBZDQirD51Ro6zbNKVP9LP7u:tv64HnCD3DQWDXRo6zb2LP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2