4d5d4495e3f5787646b35e6e2e4ba1f6b1962b19a516c24191776ff6201b419d | Triage

Sharing

General

Target

506af351a6161f5c18fc7dbd67174ca317641d17
Size

117KB
Sample

230110-b5fk8agf63
MD5

2c9169600974ec7c6b6a6bd38bccda1a
SHA1

506af351a6161f5c18fc7dbd67174ca317641d17
SHA256

4d5d4495e3f5787646b35e6e2e4ba1f6b1962b19a516c24191776ff6201b419d
SHA512

e94d66945fe56d86e90c3f587468240143912b835382f35cfd246ffcaa4d79174e8d24fecf51be7e2edd2283206a581a26a70663e12dcd59e2f0626f2ce6d7a4
SSDEEP

3072:m8iL6pVpwLDi9k9ZW9nkv8dudL9Fvjsp3XzbNBZ:HiLQDwLDOnkcudZxsFdz

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  506af351a6161f5c18fc7dbd67174ca317641d17
- Size
  
  117KB
- MD5
  
  2c9169600974ec7c6b6a6bd38bccda1a
- SHA1
  
  506af351a6161f5c18fc7dbd67174ca317641d17
- SHA256
  
  4d5d4495e3f5787646b35e6e2e4ba1f6b1962b19a516c24191776ff6201b419d
- SHA512
  
  e94d66945fe56d86e90c3f587468240143912b835382f35cfd246ffcaa4d79174e8d24fecf51be7e2edd2283206a581a26a70663e12dcd59e2f0626f2ce6d7a4
- SSDEEP
  
  3072:m8iL6pVpwLDi9k9ZW9nkv8dudL9Fvjsp3XzbNBZ:HiLQDwLDOnkcudZxsFdz
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
- Checks for any installed AV software in registry
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Security Software Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2