efb2ad71f0969293186b74e515614d69c4528faf3f7cf6099d710f36dfe5b6e2 | Triage

Sharing

General

Target

efb2ad71f0969293186b74e515614d69c4528faf3f7cf6099d710f36dfe5b6e2
Size

598KB
Sample

230707-mfvvdshd6x
MD5

f51d187e9d4024f6e10395072a3f6f75
SHA1

879d58fac670b28b82f381d3f032366e8a5d45b2
SHA256

efb2ad71f0969293186b74e515614d69c4528faf3f7cf6099d710f36dfe5b6e2
SHA512

35b493b40ad8a413d9fdc86233ec8a3d3a8bb64a6cc13ea1e7eee44e6113d55ff780ee8f6bd61706317dd958cc01811495bfff548e1b7bf71430a9e8424421de
SSDEEP

12288:ClxOOEsxRUBTEOgQD1LK+trbgNyLQCvmzws/dr7ZK:CG/sxRSEOXK+trbgchvKZ/dr9K

Score

7^/10

Malware Config

Targets

- Target
  
  efb2ad71f0969293186b74e515614d69c4528faf3f7cf6099d710f36dfe5b6e2
- Size
  
  598KB
- MD5
  
  f51d187e9d4024f6e10395072a3f6f75
- SHA1
  
  879d58fac670b28b82f381d3f032366e8a5d45b2
- SHA256
  
  efb2ad71f0969293186b74e515614d69c4528faf3f7cf6099d710f36dfe5b6e2
- SHA512
  
  35b493b40ad8a413d9fdc86233ec8a3d3a8bb64a6cc13ea1e7eee44e6113d55ff780ee8f6bd61706317dd958cc01811495bfff548e1b7bf71430a9e8424421de
- SSDEEP
  
  12288:ClxOOEsxRUBTEOgQD1LK+trbgNyLQCvmzws/dr7ZK:CG/sxRSEOXK+trbgchvKZ/dr9K
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2