a43b4e35ef55eb544ed9529dde00d19d952fd39f2968a91d5562017eeb392195 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a43b4e35ef55eb544ed9529dde00d19d952fd39f2968a91d5562017eeb392195
Size

706KB
Sample

221202-22jftaga6v
MD5

b01719fb0f6e660eea2ad4221804c403
SHA1

d0ce763fad6b4c5a06297769fd708a9804145cf9
SHA256

a43b4e35ef55eb544ed9529dde00d19d952fd39f2968a91d5562017eeb392195
SHA512

d93a5440715790c38a96b3ac119840dea8f063375a84b83cc0294911dd1f33e69018058fcfa27e7cd12ec5455552cff55ab4abdf3b267941652e9ec854744f94
SSDEEP

12288:gp/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGspHJcYxTuOeFYFzbsa:gpQ/6trYlvYPK+lqD73TeGspp5/eFYFr

Score

8^/10

Malware Config

Targets

- Target
  
  a43b4e35ef55eb544ed9529dde00d19d952fd39f2968a91d5562017eeb392195
- Size
  
  706KB
- MD5
  
  b01719fb0f6e660eea2ad4221804c403
- SHA1
  
  d0ce763fad6b4c5a06297769fd708a9804145cf9
- SHA256
  
  a43b4e35ef55eb544ed9529dde00d19d952fd39f2968a91d5562017eeb392195
- SHA512
  
  d93a5440715790c38a96b3ac119840dea8f063375a84b83cc0294911dd1f33e69018058fcfa27e7cd12ec5455552cff55ab4abdf3b267941652e9ec854744f94
- SSDEEP
  
  12288:gp/iN/mlVdtvrYeyZJf7kPK+iqBZn+D73iKHeGspHJcYxTuOeFYFzbsa:gpQ/6trYlvYPK+lqD73TeGspp5/eFYFr
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2