6fbb7f3f3f5d601f16abe0f48d5b8cdf44520ea19f4082d04258c1ce7cbd2416 | Triage

Sharing

General

Target

30b92b83b2c41ff493932d8345c0fa96
Size

15KB
Sample

231219-qks35secf9
MD5

30b92b83b2c41ff493932d8345c0fa96
SHA1

aae68ab8ee205a061f5ef0b2618607b992d24e50
SHA256

6fbb7f3f3f5d601f16abe0f48d5b8cdf44520ea19f4082d04258c1ce7cbd2416
SHA512

4962ddfcff4a37a01842dcf3df12cb3f1ab81a198ae1401b443fd05c47b2742a67440c5f88513f40d873a5d6995cd091c6a8f02dc9b8986ab31e54d79f9570ff
SSDEEP

384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4f:hDXWipuE+K3/SSHgxmO

Score

7^/10

Malware Config

Targets

- Target
  
  30b92b83b2c41ff493932d8345c0fa96
- Size
  
  15KB
- MD5
  
  30b92b83b2c41ff493932d8345c0fa96
- SHA1
  
  aae68ab8ee205a061f5ef0b2618607b992d24e50
- SHA256
  
  6fbb7f3f3f5d601f16abe0f48d5b8cdf44520ea19f4082d04258c1ce7cbd2416
- SHA512
  
  4962ddfcff4a37a01842dcf3df12cb3f1ab81a198ae1401b443fd05c47b2742a67440c5f88513f40d873a5d6995cd091c6a8f02dc9b8986ab31e54d79f9570ff
- SSDEEP
  
  384:hdtXWiJCQxsEwvK3RpSSHuGQG2Rqm4YhY4f:hDXWipuE+K3/SSHgxmO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2