612e2a99898cbe03f132fcdfa38bdf87f42f047d2d874849e6ff916844ee409e | Triage

Sharing

General

Target

10077bfb18a6bba03a4d83181d9284eb
Size

112KB
Sample

231230-f699fagcf3
MD5

10077bfb18a6bba03a4d83181d9284eb
SHA1

69f5622a566a441c4d185b795a375102e3c97f26
SHA256

612e2a99898cbe03f132fcdfa38bdf87f42f047d2d874849e6ff916844ee409e
SHA512

00364f3a11eb0e886f4f39bffecb2545a8c766a050d0cacc89c7e1c8d25fcb96ab305e92af0e49cbe19b6805077af1e5420c8718ece18819dcf992ce0b0d521b
SSDEEP

1536:VCqlZmQNc6BJBrkqY3QjlpFvKwxqsQHpuRsjorJEbsVCCvr70a3/Hdep:KMc4a3ah5CNcJw0xbvH

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  10077bfb18a6bba03a4d83181d9284eb
- Size
  
  112KB
- MD5
  
  10077bfb18a6bba03a4d83181d9284eb
- SHA1
  
  69f5622a566a441c4d185b795a375102e3c97f26
- SHA256
  
  612e2a99898cbe03f132fcdfa38bdf87f42f047d2d874849e6ff916844ee409e
- SHA512
  
  00364f3a11eb0e886f4f39bffecb2545a8c766a050d0cacc89c7e1c8d25fcb96ab305e92af0e49cbe19b6805077af1e5420c8718ece18819dcf992ce0b0d521b
- SSDEEP
  
  1536:VCqlZmQNc6BJBrkqY3QjlpFvKwxqsQHpuRsjorJEbsVCCvr70a3/Hdep:KMc4a3ah5CNcJw0xbvH
Score

8^/10

persistence
- Adds policy Run key to start application
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2