d480efc801b92db4f4ae3eb45c1f7047b480808d036775b1ade26aa27fc3d4b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

496888c25c68da48c4e3f9a4ef9a3ddf
Size

824KB
Sample

231226-bwk5cacfh3
MD5

496888c25c68da48c4e3f9a4ef9a3ddf
SHA1

0c6478d01af3b9642013fceca0ed212ad4f6594a
SHA256

d480efc801b92db4f4ae3eb45c1f7047b480808d036775b1ade26aa27fc3d4b5
SHA512

4c9c063bb7024ae29ffa7e247a8d7a3b09996500343a7305f315297f41c4054001311171d6b0df42195953e01987875f91ddfd1fcf4eaaa6f1ee5c535f3b29c8
SSDEEP

24576:mF2QVOArcsxVCJPPILCqEJXaedtOCLLLLLLLLL9LLLLLLLLLoLLLLLLLLL9LLLLx:QVOLPYLhEFprK5RV

Score

7^/10

Malware Config

Targets

- Target
  
  496888c25c68da48c4e3f9a4ef9a3ddf
- Size
  
  824KB
- MD5
  
  496888c25c68da48c4e3f9a4ef9a3ddf
- SHA1
  
  0c6478d01af3b9642013fceca0ed212ad4f6594a
- SHA256
  
  d480efc801b92db4f4ae3eb45c1f7047b480808d036775b1ade26aa27fc3d4b5
- SHA512
  
  4c9c063bb7024ae29ffa7e247a8d7a3b09996500343a7305f315297f41c4054001311171d6b0df42195953e01987875f91ddfd1fcf4eaaa6f1ee5c535f3b29c8
- SSDEEP
  
  24576:mF2QVOArcsxVCJPPILCqEJXaedtOCLLLLLLLLL9LLLLLLLLLoLLLLLLLLL9LLLLx:QVOLPYLhEFprK5RV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2