42a54f957592e09e8a72f8524acdb605c663e44b90e75ac318580c65e66058ae | Triage

Sharing

General

Target

963921d3f8372cdbd15984db90a98fbf
Size

208KB
Sample

231222-p96vvsfdf2
MD5

963921d3f8372cdbd15984db90a98fbf
SHA1

f66618f530d7d289955c44ede14841141cf8d044
SHA256

42a54f957592e09e8a72f8524acdb605c663e44b90e75ac318580c65e66058ae
SHA512

9213c3a122efe0ed070ffc2b0df27ec35d8748c299360d476e2c6d9ea9913164ca45899dcd7228c1b18344edb2178bf03cd99ccb56fb7da0fde25e41e251164f
SSDEEP

3072:JO+bY++73VQdqPg7WqD+NhGJZstCVH9xGSp+BPq19XAHtUcmz/:MWWzcJZs0d91WPquUcmb

Score

7^/10

Malware Config

Targets

- Target
  
  963921d3f8372cdbd15984db90a98fbf
- Size
  
  208KB
- MD5
  
  963921d3f8372cdbd15984db90a98fbf
- SHA1
  
  f66618f530d7d289955c44ede14841141cf8d044
- SHA256
  
  42a54f957592e09e8a72f8524acdb605c663e44b90e75ac318580c65e66058ae
- SHA512
  
  9213c3a122efe0ed070ffc2b0df27ec35d8748c299360d476e2c6d9ea9913164ca45899dcd7228c1b18344edb2178bf03cd99ccb56fb7da0fde25e41e251164f
- SSDEEP
  
  3072:JO+bY++73VQdqPg7WqD+NhGJZstCVH9xGSp+BPq19XAHtUcmz/:MWWzcJZs0d91WPquUcmb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2