0faeec556b4cd1ce01b839f7f8ce8eed7907cd23352c65980ca4e43e3abbccf8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0faeec556b4cd1ce01b839f7f8ce8eed7907cd23352c65980ca4e43e3abbccf8
Size

1.6MB
Sample

230417-fzxd1aeg4x
MD5

328046307b041ba25dc7f98c5496b305
SHA1

ac08f6363bfd9a3383ca5798bf0e9b52f12edfd5
SHA256

0faeec556b4cd1ce01b839f7f8ce8eed7907cd23352c65980ca4e43e3abbccf8
SHA512

74c451dc884aee032a024fe5e0467ec242b89b074245118cf6bdc67df7a8e47bff5f59b364a0cc499369143fd6b7ad73cadd922e35068b0c952b9ed3cb1deafa
SSDEEP

24576:mTsE81bhZeDwHd50MCMHCBkZolWLR8lQIypts4Y/D75pSonYJDankSU:UsE8l2Sd50oiRlWL2lMptOD7ZYJW

Score

7^/10

Malware Config

Targets

- Target
  
  0faeec556b4cd1ce01b839f7f8ce8eed7907cd23352c65980ca4e43e3abbccf8
- Size
  
  1.6MB
- MD5
  
  328046307b041ba25dc7f98c5496b305
- SHA1
  
  ac08f6363bfd9a3383ca5798bf0e9b52f12edfd5
- SHA256
  
  0faeec556b4cd1ce01b839f7f8ce8eed7907cd23352c65980ca4e43e3abbccf8
- SHA512
  
  74c451dc884aee032a024fe5e0467ec242b89b074245118cf6bdc67df7a8e47bff5f59b364a0cc499369143fd6b7ad73cadd922e35068b0c952b9ed3cb1deafa
- SSDEEP
  
  24576:mTsE81bhZeDwHd50MCMHCBkZolWLR8lQIypts4Y/D75pSonYJDankSU:UsE8l2Sd50oiRlWL2lMptOD7ZYJW
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2