a67a3beb250c7750ffe5ad0ca6508036dde16fc66a5d6597e646bbc82f2c777b | Triage

Sharing

General

Target

0db60cdf11492f7c14bd5e98385b494e
Size

147KB
Sample

231230-ekfx2agecq
MD5

0db60cdf11492f7c14bd5e98385b494e
SHA1

f9661dee16fb4157326d694fa84f82582da1d962
SHA256

a67a3beb250c7750ffe5ad0ca6508036dde16fc66a5d6597e646bbc82f2c777b
SHA512

39b7b66b9232c2953bbd3bf2f0ea898c03d6e5dc03d3b7d77c3f97b24a145a7fef0c484d30e0a16b4a55f938345fe58539911b46f80a122349b6dc7ecde24c53
SSDEEP

3072:D6qocWErFxFcod4s31TaFULfFytzl0OnSiMtvLS4Ujg7:D6qlLrrKiZaSfcZlXzWOvq

Score

7^/10

Malware Config

Targets

- Target
  
  0db60cdf11492f7c14bd5e98385b494e
- Size
  
  147KB
- MD5
  
  0db60cdf11492f7c14bd5e98385b494e
- SHA1
  
  f9661dee16fb4157326d694fa84f82582da1d962
- SHA256
  
  a67a3beb250c7750ffe5ad0ca6508036dde16fc66a5d6597e646bbc82f2c777b
- SHA512
  
  39b7b66b9232c2953bbd3bf2f0ea898c03d6e5dc03d3b7d77c3f97b24a145a7fef0c484d30e0a16b4a55f938345fe58539911b46f80a122349b6dc7ecde24c53
- SSDEEP
  
  3072:D6qocWErFxFcod4s31TaFULfFytzl0OnSiMtvLS4Ujg7:D6qlLrrKiZaSfcZlXzWOvq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2