d1c91571be084146e1d17237ba0f5c291b6a5f31fcb470d8e6bc60d28c4ec854 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5be926ecf4feb4e0f37208578b03c1a9
Size

244KB
Sample

240115-c3gaeafgcj
MD5

5be926ecf4feb4e0f37208578b03c1a9
SHA1

3504d24afc9c4e8617ccea8409ca887a6a1127ee
SHA256

d1c91571be084146e1d17237ba0f5c291b6a5f31fcb470d8e6bc60d28c4ec854
SHA512

a008b83f1dece6b1dfa704d18b719c3eabc6aabacc7338f3b79a961c555f221ba2e38204a320ee3310348a9ba39e5555524005076738512de9c802b0b72a3f09
SSDEEP

6144:Zh3idhONY259BH1DzJ5PzVNtGgc+F9TBd01vzKFS:Zh3iXPw9T8MS

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  5be926ecf4feb4e0f37208578b03c1a9
- Size
  
  244KB
- MD5
  
  5be926ecf4feb4e0f37208578b03c1a9
- SHA1
  
  3504d24afc9c4e8617ccea8409ca887a6a1127ee
- SHA256
  
  d1c91571be084146e1d17237ba0f5c291b6a5f31fcb470d8e6bc60d28c4ec854
- SHA512
  
  a008b83f1dece6b1dfa704d18b719c3eabc6aabacc7338f3b79a961c555f221ba2e38204a320ee3310348a9ba39e5555524005076738512de9c802b0b72a3f09
- SSDEEP
  
  6144:Zh3idhONY259BH1DzJ5PzVNtGgc+F9TBd01vzKFS:Zh3iXPw9T8MS
Score

8^/10

evasion
- Disables Task Manager via registry modification
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2