ad139795c685f1eeb0c701d8734adf5abc4da488477678e825017c2d8b4a1b36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PT90490 Solicitud oferta DISELECTRIC SIEMENS 10_23_2023.gz
Size

17KB
Sample

231023-krge2ahc34
MD5

aa59f5eda99ffc766d2bf6f1030c78a9
SHA1

ed5e1c05d68fb1cd73dc7016dcfb966e5b5e803b
SHA256

ad139795c685f1eeb0c701d8734adf5abc4da488477678e825017c2d8b4a1b36
SHA512

c6c7a752a342fa6848f6520dac2ad3ccebb31d365b8f9b70eb2d460e87e25668a2597a788455afdf18f4914712d2237e92d8645744836080616457c75ac00b0f
SSDEEP

384:ICncW2OGQxFbq3YbdNyQJF479sgY/jdfe9nVGq7UNg6+3cu+kU5t1:hctOjDe3Yx4yKmdeVj7UK6LuC1

Score

7^/10

Malware Config

Targets

- Target
  
  PT90490 Solicitud oferta DISELECTRIC SIEMENS 10_23_2023.vbs
- Size
  
  19KB
- MD5
  
  fd9f257ede4256e537566a2588c025b4
- SHA1
  
  ac08110a794c0d073c070a31d26dad8b01fb9b1f
- SHA256
  
  f4815b87e81d4b6371326db31b0cb71d201d774f4fca8e866692768030fff729
- SHA512
  
  d801d138e20def7ace0a1c37866ab50195a88d7d877c6af03cab84db6b401ef25546367248e8d4662da2914c91ee9f0eda575c4f430792629ef36c6aa58dc281
- SSDEEP
  
  384:jwZrIvxXwh6QnSuFehpKfI6SwJbVNDlJD/vWEMFWmqFs9FFZlE+vg:jwZ4g4HuoCRh1lh/vW0mlfVEr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2