703cb2bedcc237d56dac563b99de15e57cb2df15d05e49188419e54da274d8c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a5c6b8f6174c205f1be1e6c5169d5f
Size

122KB
Sample

231231-fcc2vaecgm
MD5

28a5c6b8f6174c205f1be1e6c5169d5f
SHA1

b11007d9319bc3ba52fb9b833ae707ce8e96a8d1
SHA256

703cb2bedcc237d56dac563b99de15e57cb2df15d05e49188419e54da274d8c5
SHA512

ad1a39ddc355cb62fc94c59c79014846ed83ff94b60ce9fb1ba2aff72c784e4d08abfe929cbfbff00491a9ac95513fbb70291f849a6f08f3fda56786926fec4d
SSDEEP

3072:vOUVl+keOATJMJXPdHOdQa/y70ixLT9yYEIDjTRlU2JF:vtrQqwqAYz

Score

8^/10

Malware Config

Targets

- Target
  
  28a5c6b8f6174c205f1be1e6c5169d5f
- Size
  
  122KB
- MD5
  
  28a5c6b8f6174c205f1be1e6c5169d5f
- SHA1
  
  b11007d9319bc3ba52fb9b833ae707ce8e96a8d1
- SHA256
  
  703cb2bedcc237d56dac563b99de15e57cb2df15d05e49188419e54da274d8c5
- SHA512
  
  ad1a39ddc355cb62fc94c59c79014846ed83ff94b60ce9fb1ba2aff72c784e4d08abfe929cbfbff00491a9ac95513fbb70291f849a6f08f3fda56786926fec4d
- SSDEEP
  
  3072:vOUVl+keOATJMJXPdHOdQa/y70ixLT9yYEIDjTRlU2JF:vtrQqwqAYz
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2