b03788f240f2c7351d9cb33c946fce4a8ea0941c2b18a8e2dec07f398911e197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b03788f240f2c7351d9cb33c946fce4a8ea0941c2b18a8e2dec07f398911e197
Size

184KB
Sample

221204-dqr2tabg48
MD5

19b3692ef2de5b12c586de58036a98c4
SHA1

175774ea8c214b40a000077d699966097f9b9c46
SHA256

b03788f240f2c7351d9cb33c946fce4a8ea0941c2b18a8e2dec07f398911e197
SHA512

42d43c65f109016bcce1dfdbc56a88fa63690f64de81d5d7cba6e30f70ff668fafa686b474a9198e7a95f1cab90cf266cdc89a5f9bc48e1f3d7a512020a980aa
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3hn:/7BSH8zUB+nGESaaRvoB7FJNndnsn

Score

8^/10

Malware Config

Targets

- Target
  
  b03788f240f2c7351d9cb33c946fce4a8ea0941c2b18a8e2dec07f398911e197
- Size
  
  184KB
- MD5
  
  19b3692ef2de5b12c586de58036a98c4
- SHA1
  
  175774ea8c214b40a000077d699966097f9b9c46
- SHA256
  
  b03788f240f2c7351d9cb33c946fce4a8ea0941c2b18a8e2dec07f398911e197
- SHA512
  
  42d43c65f109016bcce1dfdbc56a88fa63690f64de81d5d7cba6e30f70ff668fafa686b474a9198e7a95f1cab90cf266cdc89a5f9bc48e1f3d7a512020a980aa
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3hn:/7BSH8zUB+nGESaaRvoB7FJNndnsn
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2