b98031bc2c8c02c38228b6304d2fbdd3ec1e2c60168527d3d95b7e82abfc991c | Triage

Sharing

General

Target

1a0ee408ea1d96cac957e8ad2e8cdc39
Size

416KB
Sample

231230-qrsqyshdfl
MD5

1a0ee408ea1d96cac957e8ad2e8cdc39
SHA1

0318475908957f86990ad49479c885d8ee2bb5e5
SHA256

b98031bc2c8c02c38228b6304d2fbdd3ec1e2c60168527d3d95b7e82abfc991c
SHA512

75d54970344da32ed53da39f96f6a820d9a9919f4d6a284a064e4425769356b20a754c597f5bc00ab3a98fd939e44be69c3ce1b1da78fad9c1b58f0643060704
SSDEEP

12288:gutrzh9xOXkggyeXFI7PfOnjPKIkmC70bks2:gutr5OUggyVrfOjSd7kX2

Score

7^/10

Malware Config

Targets

- Target
  
  1a0ee408ea1d96cac957e8ad2e8cdc39
- Size
  
  416KB
- MD5
  
  1a0ee408ea1d96cac957e8ad2e8cdc39
- SHA1
  
  0318475908957f86990ad49479c885d8ee2bb5e5
- SHA256
  
  b98031bc2c8c02c38228b6304d2fbdd3ec1e2c60168527d3d95b7e82abfc991c
- SHA512
  
  75d54970344da32ed53da39f96f6a820d9a9919f4d6a284a064e4425769356b20a754c597f5bc00ab3a98fd939e44be69c3ce1b1da78fad9c1b58f0643060704
- SSDEEP
  
  12288:gutrzh9xOXkggyeXFI7PfOnjPKIkmC70bks2:gutr5OUggyVrfOjSd7kX2
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2