c58a8ecd1ba97383fd13567bd9b63d259e9c9bfa65202614d955ab6d6633586f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c58a8ecd1ba97383fd13567bd9b63d259e9c9bfa65202614d955ab6d6633586f
Size

1.1MB
Sample

221203-f4lhasha32
MD5

a0c740180677bd6657d16ce118e56482
SHA1

e8101ac0d276585a9b1bf1fa76e808be9a491d97
SHA256

c58a8ecd1ba97383fd13567bd9b63d259e9c9bfa65202614d955ab6d6633586f
SHA512

a6b894498db514bf47417f15cea88f5b0e0075ae36d01d29b1103f095f3c546d98a3feb89c1b094807768f96733d4e70432e4e9aab2b53a58c5d9d6ca9a1dde3
SSDEEP

3072:sZcKcutbq8qRmwtV6fq8XpwqWYwBBCvGsC50:wcKcuZqRXr6fX+qEPCJC50

Score

7^/10

Malware Config

Targets

- Target
  
  c58a8ecd1ba97383fd13567bd9b63d259e9c9bfa65202614d955ab6d6633586f
- Size
  
  1.1MB
- MD5
  
  a0c740180677bd6657d16ce118e56482
- SHA1
  
  e8101ac0d276585a9b1bf1fa76e808be9a491d97
- SHA256
  
  c58a8ecd1ba97383fd13567bd9b63d259e9c9bfa65202614d955ab6d6633586f
- SHA512
  
  a6b894498db514bf47417f15cea88f5b0e0075ae36d01d29b1103f095f3c546d98a3feb89c1b094807768f96733d4e70432e4e9aab2b53a58c5d9d6ca9a1dde3
- SSDEEP
  
  3072:sZcKcutbq8qRmwtV6fq8XpwqWYwBBCvGsC50:wcKcuZqRXr6fX+qEPCJC50
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2