27d31a0f89f567349af2d6ad1531c2df2d259f27a0692561570dfc93fad3aaed | Triage

Sharing

General

Target

27d31a0f89f567349af2d6ad1531c2df2d259f27a0692561570dfc93fad3aaed
Size

132KB
Sample

221207-dah4zabg4v
MD5

cc631ce258a788bc2a87894b0bc20f96
SHA1

33628af53cf100343dfbeda502eee8bce23d34e7
SHA256

27d31a0f89f567349af2d6ad1531c2df2d259f27a0692561570dfc93fad3aaed
SHA512

13a2b388517c5b644853a4ffb8b911475f87f0e0ee1467bfb9c45c44161590e85fabcb85794911fa9ebbbffad551eb05b2f135d8c21950828b6dfbcadaaba4ae
SSDEEP

1536:Znwemrk/AoZUquSKg8iomZqftJ5dXUj9GdHptP:eLk/AsDuS+ixZqftJ/XUj9GpPP

Score

7^/10

Malware Config

Targets

- Target
  
  27d31a0f89f567349af2d6ad1531c2df2d259f27a0692561570dfc93fad3aaed
- Size
  
  132KB
- MD5
  
  cc631ce258a788bc2a87894b0bc20f96
- SHA1
  
  33628af53cf100343dfbeda502eee8bce23d34e7
- SHA256
  
  27d31a0f89f567349af2d6ad1531c2df2d259f27a0692561570dfc93fad3aaed
- SHA512
  
  13a2b388517c5b644853a4ffb8b911475f87f0e0ee1467bfb9c45c44161590e85fabcb85794911fa9ebbbffad551eb05b2f135d8c21950828b6dfbcadaaba4ae
- SSDEEP
  
  1536:Znwemrk/AoZUquSKg8iomZqftJ5dXUj9GdHptP:eLk/AsDuS+ixZqftJ/XUj9GpPP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2