d7705919007fa7ee92edf1e7979b1dbc14e94d4e6b0d58f3460995f46885e121 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7705919007fa7ee92edf1e7979b1dbc14e94d4e6b0d58f3460995f46885e121
Size

88KB
Sample

221206-scea5agg46
MD5

be0b2827f2c29b85d12f6b82593eb024
SHA1

30edc9ef16ad8dd4d05de0a7a847e67ac3ed53f9
SHA256

d7705919007fa7ee92edf1e7979b1dbc14e94d4e6b0d58f3460995f46885e121
SHA512

a6865e021014e51b0e4d0e2ee8bfdb39376a8fe322aad29609b6b10ea88a63ead23046e52b8823095c0d18999a4b8cd0f84d80c8f58b42feee8826a25ac93746
SSDEEP

1536:UVIhlKwrWtFtQqHd02txgJD8AmtYbU9pEbv3ExlzvxymhNr2J6FOxetOJ81BStgX:gJriq97XgJHCYbUPWvkLu+7zSt1k/

Score

7^/10

Malware Config

Targets

- Target
  
  d7705919007fa7ee92edf1e7979b1dbc14e94d4e6b0d58f3460995f46885e121
- Size
  
  88KB
- MD5
  
  be0b2827f2c29b85d12f6b82593eb024
- SHA1
  
  30edc9ef16ad8dd4d05de0a7a847e67ac3ed53f9
- SHA256
  
  d7705919007fa7ee92edf1e7979b1dbc14e94d4e6b0d58f3460995f46885e121
- SHA512
  
  a6865e021014e51b0e4d0e2ee8bfdb39376a8fe322aad29609b6b10ea88a63ead23046e52b8823095c0d18999a4b8cd0f84d80c8f58b42feee8826a25ac93746
- SSDEEP
  
  1536:UVIhlKwrWtFtQqHd02txgJD8AmtYbU9pEbv3ExlzvxymhNr2J6FOxetOJ81BStgX:gJriq97XgJHCYbUPWvkLu+7zSt1k/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2