a212aa268075919487c20202cb3bcc03b65e53308fee83dc29a6213179ac1610 | Triage

Sharing

General

Target

123196108704f2fbd42bec526ed0698b
Size

106KB
Sample

231224-zr6r9afab7
MD5

123196108704f2fbd42bec526ed0698b
SHA1

569455e422a7428e5204d37ee1c54d363fde5c8c
SHA256

a212aa268075919487c20202cb3bcc03b65e53308fee83dc29a6213179ac1610
SHA512

e4a5036fa16cf9b7647a153b570f1d952810c87be6892d29727d23376f842c4030c1609bac480e348c0e29ca5904f048d2b34df4f18aabc3f943f8a2f78cb149
SSDEEP

384:17iMxz0CYEmqd+1F8TQ2llSSK5dNa1COsx3G2OfbqEKk4mXBaaWPFhCvOFxwB:10CYjqdS2TQOO3YyIbqNkR8aeFhnFxwB

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  123196108704f2fbd42bec526ed0698b
- Size
  
  106KB
- MD5
  
  123196108704f2fbd42bec526ed0698b
- SHA1
  
  569455e422a7428e5204d37ee1c54d363fde5c8c
- SHA256
  
  a212aa268075919487c20202cb3bcc03b65e53308fee83dc29a6213179ac1610
- SHA512
  
  e4a5036fa16cf9b7647a153b570f1d952810c87be6892d29727d23376f842c4030c1609bac480e348c0e29ca5904f048d2b34df4f18aabc3f943f8a2f78cb149
- SSDEEP
  
  384:17iMxz0CYEmqd+1F8TQ2llSSK5dNa1COsx3G2OfbqEKk4mXBaaWPFhCvOFxwB:10CYjqdS2TQOO3YyIbqNkR8aeFhnFxwB
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2