da1c48fb35cfcd6cf7992f28050b5d4f3df326bfc32bcfce45e57f000abe6ca5 | Triage

Sharing

General

Target

da1c48fb35cfcd6cf7992f28050b5d4f3df326bfc32bcfce45e57f000abe6ca5
Size

7KB
Sample

240202-2fynlscbej
MD5

49ffe88201d191db2f30b70a42fd85b1
SHA1

e011ce4b873ba696bf358c38bd7b768b38e45622
SHA256

da1c48fb35cfcd6cf7992f28050b5d4f3df326bfc32bcfce45e57f000abe6ca5
SHA512

11a8904ba1a72793b715bc9108e8dd8de0babe2f7368c42f632856cf189ee7d77d7a347d062be5ad6bdb6770f412604c9828f3cf38cd2f1aab2d576a061c3224
SSDEEP

96:PNF+PyG/zq2CYnfAyKG/zKqRuX+jzlGjUBH:PNF+Pp/zq2lnfAyB/z1cYzlGjUBH

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  da1c48fb35cfcd6cf7992f28050b5d4f3df326bfc32bcfce45e57f000abe6ca5
- Size
  
  7KB
- MD5
  
  49ffe88201d191db2f30b70a42fd85b1
- SHA1
  
  e011ce4b873ba696bf358c38bd7b768b38e45622
- SHA256
  
  da1c48fb35cfcd6cf7992f28050b5d4f3df326bfc32bcfce45e57f000abe6ca5
- SHA512
  
  11a8904ba1a72793b715bc9108e8dd8de0babe2f7368c42f632856cf189ee7d77d7a347d062be5ad6bdb6770f412604c9828f3cf38cd2f1aab2d576a061c3224
- SSDEEP
  
  96:PNF+PyG/zq2CYnfAyKG/zKqRuX+jzlGjUBH:PNF+Pp/zq2lnfAyB/z1cYzlGjUBH
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2