a0a74addbe8ac2e1f326eec345cd2456654e84df21728bd074f60cc92dd43e44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0a74addbe8ac2e1f326eec345cd2456654e84df21728bd074f60cc92dd43e44
Size

150KB
Sample

221206-zmzhdafa6x
MD5

ba618ddf5cf85811677b04aae0bfa568
SHA1

329da61fa4309155f778228ce19c76f31ee718e9
SHA256

a0a74addbe8ac2e1f326eec345cd2456654e84df21728bd074f60cc92dd43e44
SHA512

c61260ddf75e3f573202ca86c7e5990027d7ad2b93789fd614d0a3e2d4e0f2172a2ff5887d8850565c1888d82089b94809d12622d7f56e57ab55cab7e0d77904
SSDEEP

3072:BZBilNYfh751dg4SieidCRME8tdsl0fCXbI592h0hzRy/nnV3:JilNYDvSieiCRMEEdOcCL495zRy/Z

Score

8^/10

Malware Config

Targets

- Target
  
  a0a74addbe8ac2e1f326eec345cd2456654e84df21728bd074f60cc92dd43e44
- Size
  
  150KB
- MD5
  
  ba618ddf5cf85811677b04aae0bfa568
- SHA1
  
  329da61fa4309155f778228ce19c76f31ee718e9
- SHA256
  
  a0a74addbe8ac2e1f326eec345cd2456654e84df21728bd074f60cc92dd43e44
- SHA512
  
  c61260ddf75e3f573202ca86c7e5990027d7ad2b93789fd614d0a3e2d4e0f2172a2ff5887d8850565c1888d82089b94809d12622d7f56e57ab55cab7e0d77904
- SSDEEP
  
  3072:BZBilNYfh751dg4SieidCRME8tdsl0fCXbI592h0hzRy/nnV3:JilNYDvSieiCRMEEdOcCL495zRy/Z
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2