b063b6dceee364220fbf9802e1a311ec14c4da4b6fd5c7e21aa9e61bbb21370c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b063b6dceee364220fbf9802e1a311ec14c4da4b6fd5c7e21aa9e61bbb21370c
Size

184KB
Sample

221204-bzsnlaeg74
MD5

4f368894bed31f869833de36874d2698
SHA1

0a5c24a391054dbd42d9fcc6b636ad0652be5987
SHA256

b063b6dceee364220fbf9802e1a311ec14c4da4b6fd5c7e21aa9e61bbb21370c
SHA512

bd5109f1ca68eeb8f6bb31da742d31d90191b8ece476bfda02e1ca30860e66fe7d1b135a61959405978577bbed3fc7888f24f9b1197e9ee09905a9a6297a355d
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3q:/7BSH8zUB+nGESaaRvoB7FJNndnT

Score

8^/10

Malware Config

Targets

- Target
  
  b063b6dceee364220fbf9802e1a311ec14c4da4b6fd5c7e21aa9e61bbb21370c
- Size
  
  184KB
- MD5
  
  4f368894bed31f869833de36874d2698
- SHA1
  
  0a5c24a391054dbd42d9fcc6b636ad0652be5987
- SHA256
  
  b063b6dceee364220fbf9802e1a311ec14c4da4b6fd5c7e21aa9e61bbb21370c
- SHA512
  
  bd5109f1ca68eeb8f6bb31da742d31d90191b8ece476bfda02e1ca30860e66fe7d1b135a61959405978577bbed3fc7888f24f9b1197e9ee09905a9a6297a355d
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3q:/7BSH8zUB+nGESaaRvoB7FJNndnT
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2