dec6f67e2053d017c801b8eca16ce48d2bdc59a67c6d06d513e70144c2721e0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dec6f67e2053d017c801b8eca16ce48d2bdc59a67c6d06d513e70144c2721e0b
Size

10.0MB
Sample

230918-e6a9nsfa3z
MD5

944959190d889ed1417d061cda1128eb
SHA1

0699ba5c57feac9f23bb112c90a255aa167144ee
SHA256

dec6f67e2053d017c801b8eca16ce48d2bdc59a67c6d06d513e70144c2721e0b
SHA512

bf1bea001342b1e435997abf20e93a28e7637dabbca9f35a7618f7173bc8ae884c6f693ecd4305b960aa77c6f7bff64d154b6830671eb20592f7288416bff540
SSDEEP

196608:tW6gI39oE77HzjNiqMDwCRN5JhTu/kzFRHKzSsOkd04hQBCG3y2E5pA7LE4:Q6vmq73fWwe5GzzNtbUW2DLE4

Score

7^/10

Malware Config

Targets

- Target
  
  dec6f67e2053d017c801b8eca16ce48d2bdc59a67c6d06d513e70144c2721e0b
- Size
  
  10.0MB
- MD5
  
  944959190d889ed1417d061cda1128eb
- SHA1
  
  0699ba5c57feac9f23bb112c90a255aa167144ee
- SHA256
  
  dec6f67e2053d017c801b8eca16ce48d2bdc59a67c6d06d513e70144c2721e0b
- SHA512
  
  bf1bea001342b1e435997abf20e93a28e7637dabbca9f35a7618f7173bc8ae884c6f693ecd4305b960aa77c6f7bff64d154b6830671eb20592f7288416bff540
- SSDEEP
  
  196608:tW6gI39oE77HzjNiqMDwCRN5JhTu/kzFRHKzSsOkd04hQBCG3y2E5pA7LE4:Q6vmq73fWwe5GzzNtbUW2DLE4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2