d45e79dad9202c1ff02f089203e68b1b28e96c02437323a59a21dc1249b1750e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

doc 202307 009200100 0001 99911.exe
Size

608KB
Sample

231126-w9xerabb36
MD5

a91a8edf24d47caa5467f0edc250d0ff
SHA1

98041ec6166c2966f676cbc8a1f1d42fec947c00
SHA256

d45e79dad9202c1ff02f089203e68b1b28e96c02437323a59a21dc1249b1750e
SHA512

0dac8878aaf2abe4e20f3884c0ffcff78150898d807468d152e207e439ff6516f98ac7f370fab34f5c2e285c2e1bcccbfd918430ca1b55997d54d279a50a534c
SSDEEP

12288:x4Vv6NZVslFs1JABNmJ4lnZxGA7sRLwQz8XdgTDdik5dCNd:6CvVsoABNmWnmA7sRLwjeTxrUd

Score

7^/10

Malware Config

Targets

- Target
  
  doc 202307 009200100 0001 99911.exe
- Size
  
  608KB
- MD5
  
  a91a8edf24d47caa5467f0edc250d0ff
- SHA1
  
  98041ec6166c2966f676cbc8a1f1d42fec947c00
- SHA256
  
  d45e79dad9202c1ff02f089203e68b1b28e96c02437323a59a21dc1249b1750e
- SHA512
  
  0dac8878aaf2abe4e20f3884c0ffcff78150898d807468d152e207e439ff6516f98ac7f370fab34f5c2e285c2e1bcccbfd918430ca1b55997d54d279a50a534c
- SSDEEP
  
  12288:x4Vv6NZVslFs1JABNmJ4lnZxGA7sRLwQz8XdgTDdik5dCNd:6CvVsoABNmWnmA7sRLwjeTxrUd
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2