b00ce0faa0525d107f8882ab1ba1b8203fb8b30395100553d0343a5a7342a41a | Triage

Sharing

General

Target

b00ce0faa0525d107f8882ab1ba1b8203fb8b30395100553d0343a5a7342a41a
Size

184KB
Sample

221204-fghg5agg75
MD5

299f027e4d27f98766ae6f0bd50f88b9
SHA1

c2cc7016f7c0da44bce37ef2716f7de3222775e8
SHA256

b00ce0faa0525d107f8882ab1ba1b8203fb8b30395100553d0343a5a7342a41a
SHA512

e1f7774c1bef04cfc1d3d6c1890adf1e4aacaea92fd1346dcdfe748e9831a476eb4024c6c1b1c61e7e99cecca57af3fb17e7be0574bb7929fad704a00041c3e7
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3h:/7BSH8zUB+nGESaaRvoB7FJNndnU

Score

8^/10

Malware Config

Targets

- Target
  
  b00ce0faa0525d107f8882ab1ba1b8203fb8b30395100553d0343a5a7342a41a
- Size
  
  184KB
- MD5
  
  299f027e4d27f98766ae6f0bd50f88b9
- SHA1
  
  c2cc7016f7c0da44bce37ef2716f7de3222775e8
- SHA256
  
  b00ce0faa0525d107f8882ab1ba1b8203fb8b30395100553d0343a5a7342a41a
- SHA512
  
  e1f7774c1bef04cfc1d3d6c1890adf1e4aacaea92fd1346dcdfe748e9831a476eb4024c6c1b1c61e7e99cecca57af3fb17e7be0574bb7929fad704a00041c3e7
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3h:/7BSH8zUB+nGESaaRvoB7FJNndnU
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2