c4e89ebe1ad512b7fee087bc152bd144056954faa85ee692fdfb8812ecbd2043 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b7d655a6aa9804d8366e1207b22bafe
Size

124KB
Sample

240108-p5h81aacfl
MD5

4b7d655a6aa9804d8366e1207b22bafe
SHA1

6598067abb69b4ba2a4ee9466637f294277785f7
SHA256

c4e89ebe1ad512b7fee087bc152bd144056954faa85ee692fdfb8812ecbd2043
SHA512

c49d7634ffc856f8f266b4e9cb2ff0f7944fc60bcafeed9018fb272a65f73e0ccc1c78af6341e5562e67d1a5f8825162aeded1ef3d459ba06c3c98cb28499762
SSDEEP

3072:GeBzd/ok8z9yjoP8cyfbgwpePQYcHd8I/lWYWuZ:G8C9CoPZyfrpIQb2Q

Score

7^/10

Malware Config

Targets

- Target
  
  4b7d655a6aa9804d8366e1207b22bafe
- Size
  
  124KB
- MD5
  
  4b7d655a6aa9804d8366e1207b22bafe
- SHA1
  
  6598067abb69b4ba2a4ee9466637f294277785f7
- SHA256
  
  c4e89ebe1ad512b7fee087bc152bd144056954faa85ee692fdfb8812ecbd2043
- SHA512
  
  c49d7634ffc856f8f266b4e9cb2ff0f7944fc60bcafeed9018fb272a65f73e0ccc1c78af6341e5562e67d1a5f8825162aeded1ef3d459ba06c3c98cb28499762
- SSDEEP
  
  3072:GeBzd/ok8z9yjoP8cyfbgwpePQYcHd8I/lWYWuZ:G8C9CoPZyfrpIQb2Q
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2