342edfbcb5e7982bbcd19dbd8028703f5cb43f5fa8a06ebf4d3e0e47ff9e28e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Document_15059.zip
Size

16KB
Sample

230130-kmqsxahg54
MD5

1c6eeee66a001a2239ad82f74e9adc05
SHA1

2f687feb37df4470eb0a72fc03a9a15d403add35
SHA256

342edfbcb5e7982bbcd19dbd8028703f5cb43f5fa8a06ebf4d3e0e47ff9e28e7
SHA512

c85f8fe1d3975c22c67168585f65e0ea00de0e7137593b2cdbf14732cec1350e9c1ce25eeb55daf15705bd0fe9b8446c827e1876b23ab00c1f1655828cc26303
SSDEEP

384:P1Cn5npM3216i7jToD/vWoveM87zaL5j8J9OxXy:g5npM3gFcD/vba7zH3OJy

Score

7^/10

Malware Config

Targets

- Target
  
  Document_15059.doc.scr
- Size
  
  16KB
- MD5
  
  f9a777357d5780482e95abbd9333fc2e
- SHA1
  
  a100f135acfe489250067fc64874b49745aa0844
- SHA256
  
  b22b92d3736d46ec635e39270782ba3b2407e465212d222723e3b709df0e95ee
- SHA512
  
  067c72522e39dcfb4ad2810af270ecfb0e0018a7905a4a244fc7b80a52c79d0c56f4337ea80d476ffe627ca10e86d9a5ea9eb113a04f4d37333b6f663785a648
- SSDEEP
  
  384:k1Cn5npM3216i7jToD/vWoveM87zaL5j8J9OxX:N5npM3gFcD/vba7zH3OJ
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2