98ce626a64e0aafb5c84a64dd2d0fd533b3394d0e99a90f2f76adc0663964327 | Triage

Sharing

General

Target

2634c57f223b1fdcd290d2a16114d134
Size

156KB
Sample

231231-dwnlksgfgn
MD5

2634c57f223b1fdcd290d2a16114d134
SHA1

5507a326c43b0fa569c434b235531eaedc82ee6e
SHA256

98ce626a64e0aafb5c84a64dd2d0fd533b3394d0e99a90f2f76adc0663964327
SHA512

8b7558cf9b10118c44926bbd5710264bd486626fbd9f501fc60ab9615c60339c3eb80f9fa0682d41531674f2c261a4dad1a9aecd037e6057e154af0362f58c57
SSDEEP

3072:W1BCyr5arv4ClydVIZ+QpbjyWJn6wDO1j5Yfa:W1BCVydwp3Sp5Yfa

Score

7^/10

Malware Config

Targets

- Target
  
  2634c57f223b1fdcd290d2a16114d134
- Size
  
  156KB
- MD5
  
  2634c57f223b1fdcd290d2a16114d134
- SHA1
  
  5507a326c43b0fa569c434b235531eaedc82ee6e
- SHA256
  
  98ce626a64e0aafb5c84a64dd2d0fd533b3394d0e99a90f2f76adc0663964327
- SHA512
  
  8b7558cf9b10118c44926bbd5710264bd486626fbd9f501fc60ab9615c60339c3eb80f9fa0682d41531674f2c261a4dad1a9aecd037e6057e154af0362f58c57
- SSDEEP
  
  3072:W1BCyr5arv4ClydVIZ+QpbjyWJn6wDO1j5Yfa:W1BCVydwp3Sp5Yfa
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2