d38e8536f8dfd2f8df9e0452b317c9230380ec0afc4ddb6e6abb922811513cc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d38e8536f8dfd2f8df9e0452b317c9230380ec0afc4ddb6e6abb922811513cc4
Size

128KB
Sample

221205-zys5qsba31
MD5

13ad1c35d358906f3fbd9aea7e557f00
SHA1

8ee0449923a45e6db8c9200430cd44074c1ea059
SHA256

d38e8536f8dfd2f8df9e0452b317c9230380ec0afc4ddb6e6abb922811513cc4
SHA512

f2db53d496d5c03ea2fc5a1f17144ebf0ccf44ccaeaa1fbcc6a79da815a51048ab31eddac42f58f3dd496cac3c2d4cedf9862780b3acf4d110a66a46a44f1662
SSDEEP

1536:C197F8BJJPZKBRlkE+Bm4Y+WZgKnEb62OayO+MnLkp3rni/UDqtL/kEXh8Esow:0FCdPTAQpgy6WL4bi/UDqFpiE

Score

7^/10

Malware Config

Targets

- Target
  
  d38e8536f8dfd2f8df9e0452b317c9230380ec0afc4ddb6e6abb922811513cc4
- Size
  
  128KB
- MD5
  
  13ad1c35d358906f3fbd9aea7e557f00
- SHA1
  
  8ee0449923a45e6db8c9200430cd44074c1ea059
- SHA256
  
  d38e8536f8dfd2f8df9e0452b317c9230380ec0afc4ddb6e6abb922811513cc4
- SHA512
  
  f2db53d496d5c03ea2fc5a1f17144ebf0ccf44ccaeaa1fbcc6a79da815a51048ab31eddac42f58f3dd496cac3c2d4cedf9862780b3acf4d110a66a46a44f1662
- SSDEEP
  
  1536:C197F8BJJPZKBRlkE+Bm4Y+WZgKnEb62OayO+MnLkp3rni/UDqtL/kEXh8Esow:0FCdPTAQpgy6WL4bi/UDqFpiE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2