b04b0096e733f6b350ccba8939c90b812605c0627daa76c8c68234d115ea643c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b04b0096e733f6b350ccba8939c90b812605c0627daa76c8c68234d115ea643c
Size

40KB
Sample

221205-zy939aga83
MD5

5c468eff79baaedd955454fb64695c28
SHA1

566c6664efd2fc72d752107bea6db36a6c5d7338
SHA256

b04b0096e733f6b350ccba8939c90b812605c0627daa76c8c68234d115ea643c
SHA512

79ebbeb194302077bc9d57c10b31380b859d28d757b962390d3650491978c13c372553830fb6cc4e7161ee60b2e989762bb7e245f6d70004119bba5163421595
SSDEEP

384:yHyFwRVOTtTaYT/lM3T63KqU/kdzamVSBE+isJef9EoltS1wV3jig1wmVM0+r1m3:yHowRVOxmDieI2SSDeJD7jSrqf

Score

7^/10

Malware Config

Targets

- Target
  
  b04b0096e733f6b350ccba8939c90b812605c0627daa76c8c68234d115ea643c
- Size
  
  40KB
- MD5
  
  5c468eff79baaedd955454fb64695c28
- SHA1
  
  566c6664efd2fc72d752107bea6db36a6c5d7338
- SHA256
  
  b04b0096e733f6b350ccba8939c90b812605c0627daa76c8c68234d115ea643c
- SHA512
  
  79ebbeb194302077bc9d57c10b31380b859d28d757b962390d3650491978c13c372553830fb6cc4e7161ee60b2e989762bb7e245f6d70004119bba5163421595
- SSDEEP
  
  384:yHyFwRVOTtTaYT/lM3T63KqU/kdzamVSBE+isJef9EoltS1wV3jig1wmVM0+r1m3:yHowRVOxmDieI2SSDeJD7jSrqf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2