97aba511436be7c786ca44e9beda04cb02d52f2dbf34c2e1eb0eef0ef01d6279 | Triage

Sharing

General

Target

97aba511436be7c786ca44e9beda04cb02d52f2dbf34c2e1eb0eef0ef01d6279
Size

121KB
Sample

221203-vdd3vshb82
MD5

68c90167a99f147ab3d263767bd802c1
SHA1

22046ffd19bf12516f7cfadbb36343ba9675787c
SHA256

97aba511436be7c786ca44e9beda04cb02d52f2dbf34c2e1eb0eef0ef01d6279
SHA512

4bef87f3b2e2910503ed14a2425424577995b5f297e37044779a3b9dba65743e40965f15522baa665e63179bd53461f3a82637005b4cc183f1a84b5649be1381
SSDEEP

3072:NRaMqB5SZtCfs16O0iFdYcnYB64PchzcM:+MqB5SZQ0Ci/YcYB6RhzL

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  97aba511436be7c786ca44e9beda04cb02d52f2dbf34c2e1eb0eef0ef01d6279
- Size
  
  121KB
- MD5
  
  68c90167a99f147ab3d263767bd802c1
- SHA1
  
  22046ffd19bf12516f7cfadbb36343ba9675787c
- SHA256
  
  97aba511436be7c786ca44e9beda04cb02d52f2dbf34c2e1eb0eef0ef01d6279
- SHA512
  
  4bef87f3b2e2910503ed14a2425424577995b5f297e37044779a3b9dba65743e40965f15522baa665e63179bd53461f3a82637005b4cc183f1a84b5649be1381
- SSDEEP
  
  3072:NRaMqB5SZtCfs16O0iFdYcnYB64PchzcM:+MqB5SZQ0Ci/YcYB6RhzL
Score

8^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2