69f275c4e85f0cdc320ea2956a359cc2230ebe5492d2e1297048eb10933f7c50 | Triage

Sharing

General

Target

51ab827a541737c3612f61ec35e7c824a8f6df3a1b800dd0748c3f5a9901bc98.zip
Size

54KB
Sample

231012-hq4stscg6w
MD5

cd5a5c150db95748e8165444cbe7dbbb
SHA1

038e4cc9ba6905140fc531c3da12f08671bf28e9
SHA256

69f275c4e85f0cdc320ea2956a359cc2230ebe5492d2e1297048eb10933f7c50
SHA512

74efcd87bc3d68ed5ccb84f6c4c2a2e08a3cf2829ad314951666acdc1c48616f3c15a58d23a7a449e03cbc27c33a2c6bd303cd9d4fea6039b2b97617672201a7
SSDEEP

1536:DScrmTWM59m5yr6/jZd82aqlatyrSTLsA1OzQzV7l7Z:DJKiwm91K0rCVOAV79Z

Score

8^/10

Malware Config

Targets

- Target
  
  51ab827a541737c3612f61ec35e7c824a8f6df3a1b800dd0748c3f5a9901bc98.hta
- Size
  
  1.3MB
- MD5
  
  12e11aec09a12f714ccf9ab425ca70e9
- SHA1
  
  9dead6076a2dadf2c2b530038bd4c3f6c0eb5aaa
- SHA256
  
  51ab827a541737c3612f61ec35e7c824a8f6df3a1b800dd0748c3f5a9901bc98
- SHA512
  
  29834691a9ca405b875622f273320699e71e2fab5cf5ef396f6248bfaf4e88836bbfc8817ebeea24f8ea2ebd19df3510bf28b1026a9a1a7d25fd6f32494ae74d
- SSDEEP
  
  3072:rsas4u5vq277nFQX1OW9zBvG7+jY8iJgeUeBTfRtqvaZmcI2oZRa/FU:4aRu5vbFQXU653j0JDDDZmcI2oZRaNU
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2