af3b297403c5349ad504ff9f863e78c9628c94fcbe83fd59af246edad3aef957 | Triage

Sharing

General

Target

af3b297403c5349ad504ff9f863e78c9628c94fcbe83fd59af246edad3aef957
Size

191KB
Sample

221204-pmh6aahb95
MD5

6b0e9044f00a62783ab1cc35baf550e6
SHA1

588d5efdbdd250d8eb93e0263941bec1411c0652
SHA256

af3b297403c5349ad504ff9f863e78c9628c94fcbe83fd59af246edad3aef957
SHA512

e3d00de3ec1529b6d6ef155ffd730da67467aefab646314772649187afa1e675861e789912e7a26235d9b69f2173d1fafe72e64502ed62fe227df9a5b229b50b
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d2:HAVySV1eY4k437d+4wkTHdS2e

Score

7^/10

Malware Config

Targets

- Target
  
  af3b297403c5349ad504ff9f863e78c9628c94fcbe83fd59af246edad3aef957
- Size
  
  191KB
- MD5
  
  6b0e9044f00a62783ab1cc35baf550e6
- SHA1
  
  588d5efdbdd250d8eb93e0263941bec1411c0652
- SHA256
  
  af3b297403c5349ad504ff9f863e78c9628c94fcbe83fd59af246edad3aef957
- SHA512
  
  e3d00de3ec1529b6d6ef155ffd730da67467aefab646314772649187afa1e675861e789912e7a26235d9b69f2173d1fafe72e64502ed62fe227df9a5b229b50b
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d2:HAVySV1eY4k437d+4wkTHdS2e
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2