e205e15fabf005cd3d8a2d749b06dff260d445907b1010ff3227233f12d852d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

587529d2e01a3e5d8940b5177dd53ea8
Size

16KB
Sample

231226-grnybsece2
MD5

587529d2e01a3e5d8940b5177dd53ea8
SHA1

c2149efa4649ca1204923f12c2536308c1b605be
SHA256

e205e15fabf005cd3d8a2d749b06dff260d445907b1010ff3227233f12d852d5
SHA512

d3793d62c92f660c2c08a819c9dc3b92574a1c07ef996baa3c874cfa9d86f180a866c31d5289c3d191d4227ae9241a2037eb41bde2df10deb9d8c37fbfc9a94d
SSDEEP

96:8oww1IkQ3RHHsWpRei7012sLyvV+cwaExkstmWOkVr3Q0JIZ+BajaL:1eneiAH+dEBkymTkVBIZ+BauL

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  587529d2e01a3e5d8940b5177dd53ea8
- Size
  
  16KB
- MD5
  
  587529d2e01a3e5d8940b5177dd53ea8
- SHA1
  
  c2149efa4649ca1204923f12c2536308c1b605be
- SHA256
  
  e205e15fabf005cd3d8a2d749b06dff260d445907b1010ff3227233f12d852d5
- SHA512
  
  d3793d62c92f660c2c08a819c9dc3b92574a1c07ef996baa3c874cfa9d86f180a866c31d5289c3d191d4227ae9241a2037eb41bde2df10deb9d8c37fbfc9a94d
- SSDEEP
  
  96:8oww1IkQ3RHHsWpRei7012sLyvV+cwaExkstmWOkVr3Q0JIZ+BajaL:1eneiAH+dEBkymTkVBIZ+BauL
Score

8^/10

evasion
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2