1e539e4edb08c5fd4a091ca8b96c44e3c3c11034483b9a75d184c5affca68a03 | Triage

Sharing

General

Target

2c136aa55d66577608f8d74d3ff0d1cc
Size

2KB
Sample

231231-hhgckabbg5
MD5

2c136aa55d66577608f8d74d3ff0d1cc
SHA1

516ecb3377bebffd5cc6a73b012e8990fdb66be0
SHA256

1e539e4edb08c5fd4a091ca8b96c44e3c3c11034483b9a75d184c5affca68a03
SHA512

efee1ddfd4834d68a70c5bc6bc1a5336420458dd735e7369027758a3347b9fefa2ba37a864536dfba339e46c61d9df961307e819b40fd6f7eae316da20ec20fb

Score

7^/10

Malware Config

Targets

- Target
  
  2c136aa55d66577608f8d74d3ff0d1cc
- Size
  
  2KB
- MD5
  
  2c136aa55d66577608f8d74d3ff0d1cc
- SHA1
  
  516ecb3377bebffd5cc6a73b012e8990fdb66be0
- SHA256
  
  1e539e4edb08c5fd4a091ca8b96c44e3c3c11034483b9a75d184c5affca68a03
- SHA512
  
  efee1ddfd4834d68a70c5bc6bc1a5336420458dd735e7369027758a3347b9fefa2ba37a864536dfba339e46c61d9df961307e819b40fd6f7eae316da20ec20fb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2