396de0692dfdb825fb6e982df7350d0517c03ffdf293d8b5b3ca1daae68f8532 | Triage

Sharing

General

Target

ovisetup.exe
Size

7KB
Sample

231117-xw4scaeb7y
MD5

30c869f86070bb17506fdc6aeaf84d60
SHA1

0cd0309850ea039337e98dd3bf9eef5706de459d
SHA256

396de0692dfdb825fb6e982df7350d0517c03ffdf293d8b5b3ca1daae68f8532
SHA512

31f0349713e80284dedc9ca8fe712005c4ba592ee2744532e5611c3969c6d4af1ccf63a2ec389b5426f2add0cb68161dd87c0abb2256b7319ab19a0766fdf9af
SSDEEP

192:3Le038gJvNdaLix9upSiP/VunlYJLLLTutQH5cqbx:3Le038gzdaLiG3hPLTuKHTb

Score

7^/10

Malware Config

Targets

- Target
  
  ovisetup.exe
- Size
  
  7KB
- MD5
  
  30c869f86070bb17506fdc6aeaf84d60
- SHA1
  
  0cd0309850ea039337e98dd3bf9eef5706de459d
- SHA256
  
  396de0692dfdb825fb6e982df7350d0517c03ffdf293d8b5b3ca1daae68f8532
- SHA512
  
  31f0349713e80284dedc9ca8fe712005c4ba592ee2744532e5611c3969c6d4af1ccf63a2ec389b5426f2add0cb68161dd87c0abb2256b7319ab19a0766fdf9af
- SSDEEP
  
  192:3Le038gJvNdaLix9upSiP/VunlYJLLLTutQH5cqbx:3Le038gzdaLiG3hPLTuKHTb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2