General
-
Target
12b1836eed49729bf60b87f0ed65e6b1a74fb77152d1c7974ca46692c08b1013
-
Size
1MB
-
Sample
230319-c14mxsgf3x
-
MD5
a781c1ab5e2af665c8f300acafc0d30b
-
SHA1
f3a4ec427bcf014ae106e5be6cd730455b4b0648
-
SHA256
12b1836eed49729bf60b87f0ed65e6b1a74fb77152d1c7974ca46692c08b1013
-
SHA512
6e1f450364125e4d01f6974802d84dc5a6ee2d0ebd9c245cd52982e79d3d6a7563265c840d7a99802cf35ba1237d5070f67321c8376d43a2e04340b7a9980c60
-
SSDEEP
24576:gJr8tE+gHqwk4c9A8xO3F8f2I5SITbJ4bfXf5gELIXlgLHcBFqb4h6h4:gJ4NwkyTq2I5S4YP5dYuLHcBG4Z
Static task
static1
Behavioral task
behavioral1
Sample
12b1836eed49729bf60b87f0ed65e6b1a74fb77152d1c7974ca46692c08b1013.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
12b1836eed49729bf60b87f0ed65e6b1a74fb77152d1c7974ca46692c08b1013
-
Size
1MB
-
MD5
a781c1ab5e2af665c8f300acafc0d30b
-
SHA1
f3a4ec427bcf014ae106e5be6cd730455b4b0648
-
SHA256
12b1836eed49729bf60b87f0ed65e6b1a74fb77152d1c7974ca46692c08b1013
-
SHA512
6e1f450364125e4d01f6974802d84dc5a6ee2d0ebd9c245cd52982e79d3d6a7563265c840d7a99802cf35ba1237d5070f67321c8376d43a2e04340b7a9980c60
-
SSDEEP
24576:gJr8tE+gHqwk4c9A8xO3F8f2I5SITbJ4bfXf5gELIXlgLHcBFqb4h6h4:gJ4NwkyTq2I5S4YP5dYuLHcBG4Z
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation