f4930fe7683b4492ac9b722c632efc0ad2ec41a9e35f63cb8eda347a0b97bccf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c6c5fba5b32856bc9a0cdcf6b4154f5
Size

877KB
Sample

231230-dke53abde3
MD5

0c6c5fba5b32856bc9a0cdcf6b4154f5
SHA1

cdaf9669dbd5b0e6da9a36f8b5d1f71a8d11398f
SHA256

f4930fe7683b4492ac9b722c632efc0ad2ec41a9e35f63cb8eda347a0b97bccf
SHA512

3b11669f29027796dae2658ea865a148225f0141e54df418a7556f70c2864352fd836a1d6c2162132189344bbcabb0b4d7f173bc67061467f6802ea7cfb96b10
SSDEEP

12288:qYL+BBF8SEzjV7657/4ckHUaFI+ORDqgoH1Dl6eNV:qxF8Bve/pWdHNH1wSV

Score

7^/10

Malware Config

Targets

- Target
  
  0c6c5fba5b32856bc9a0cdcf6b4154f5
- Size
  
  877KB
- MD5
  
  0c6c5fba5b32856bc9a0cdcf6b4154f5
- SHA1
  
  cdaf9669dbd5b0e6da9a36f8b5d1f71a8d11398f
- SHA256
  
  f4930fe7683b4492ac9b722c632efc0ad2ec41a9e35f63cb8eda347a0b97bccf
- SHA512
  
  3b11669f29027796dae2658ea865a148225f0141e54df418a7556f70c2864352fd836a1d6c2162132189344bbcabb0b4d7f173bc67061467f6802ea7cfb96b10
- SSDEEP
  
  12288:qYL+BBF8SEzjV7657/4ckHUaFI+ORDqgoH1Dl6eNV:qxF8Bve/pWdHNH1wSV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2