aff001a26a898228cabcb3792b38583f217bc8eb41e6e74d42323f1ea6fa4967 | Triage

Sharing

General

Target

aff001a26a898228cabcb3792b38583f217bc8eb41e6e74d42323f1ea6fa4967
Size

191KB
Sample

221204-gpypragc5z
MD5

3a838225ea5193a1b4090874cfef1a45
SHA1

cedbae4d20d00bd78f738f2d5ac83e650f690fff
SHA256

aff001a26a898228cabcb3792b38583f217bc8eb41e6e74d42323f1ea6fa4967
SHA512

61da5083525bf031f9bd256bc5d3af03485bd4a0dd8451db8107a81a70edabc697ec31b59a58b67f98e0cd39dbd73f6c4ad4cf2091d0084fc8aa82de5c897289
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0db:HAVySV1eY4k437d+4wkTHdS2+8

Score

7^/10

Malware Config

Targets

- Target
  
  aff001a26a898228cabcb3792b38583f217bc8eb41e6e74d42323f1ea6fa4967
- Size
  
  191KB
- MD5
  
  3a838225ea5193a1b4090874cfef1a45
- SHA1
  
  cedbae4d20d00bd78f738f2d5ac83e650f690fff
- SHA256
  
  aff001a26a898228cabcb3792b38583f217bc8eb41e6e74d42323f1ea6fa4967
- SHA512
  
  61da5083525bf031f9bd256bc5d3af03485bd4a0dd8451db8107a81a70edabc697ec31b59a58b67f98e0cd39dbd73f6c4ad4cf2091d0084fc8aa82de5c897289
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0db:HAVySV1eY4k437d+4wkTHdS2+8
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2