af17fe7cd8c93f18ab683cda6a7c6dd468cca4eb1e65eb3bd330e4b1ceeb4625 | Triage

Sharing

General

Target

af17fe7cd8c93f18ab683cda6a7c6dd468cca4eb1e65eb3bd330e4b1ceeb4625
Size

191KB
Sample

221204-qsntdsgf5y
MD5

38759ab4285e135d7e650444153ab22a
SHA1

d2a46c08ef607f3b6278ceb1858431a66e7e39c3
SHA256

af17fe7cd8c93f18ab683cda6a7c6dd468cca4eb1e65eb3bd330e4b1ceeb4625
SHA512

9e87b65a31187a8ab90916f9a06ea58f3c80b8ff0e318cd034d7b6a7db7b0f0c31859cbce28c12edd4010988ca231b36f058666de39d222d605e34732e2dd5ca
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dI:HAVySV1eY4k437d+4wkTHdS2Q

Score

7^/10

Malware Config

Targets

- Target
  
  af17fe7cd8c93f18ab683cda6a7c6dd468cca4eb1e65eb3bd330e4b1ceeb4625
- Size
  
  191KB
- MD5
  
  38759ab4285e135d7e650444153ab22a
- SHA1
  
  d2a46c08ef607f3b6278ceb1858431a66e7e39c3
- SHA256
  
  af17fe7cd8c93f18ab683cda6a7c6dd468cca4eb1e65eb3bd330e4b1ceeb4625
- SHA512
  
  9e87b65a31187a8ab90916f9a06ea58f3c80b8ff0e318cd034d7b6a7db7b0f0c31859cbce28c12edd4010988ca231b36f058666de39d222d605e34732e2dd5ca
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dI:HAVySV1eY4k437d+4wkTHdS2Q
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2