13b35c954c3d9de779bcf72021e30142333bcf7ff7717cde2cce6c189a464b83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13b35c954c3d9de779bcf72021e30142333bcf7ff7717cde2cce6c189a464b83.exe
Size

700KB
Sample

240213-c6yzmaca31
MD5

e6df6d2bc6b4d17603362ba6e2e21f72
SHA1

96b9a787da00da352755b931a72addae1542ce49
SHA256

13b35c954c3d9de779bcf72021e30142333bcf7ff7717cde2cce6c189a464b83
SHA512

067ffe9403226d15f12ade11c4a96dd6e9ca41636d6ed0fb3dd9a129c7f787ca9196e9f2cbcd55575f0aadd6fc46e2e964aae45376757848a1ba14ecdb958d08
SSDEEP

12288:uSEzqHKMbNUxEuOQYdn1xfq35ZQaj2QmeFMcugenvG6Qu8BdFW3twlFPJ0ZlrB6s:u5z87bSe8YdnQZjfm3crene8IM9wHx0s

Score

7^/10

Malware Config

Targets

- Target
  
  13b35c954c3d9de779bcf72021e30142333bcf7ff7717cde2cce6c189a464b83.exe
- Size
  
  700KB
- MD5
  
  e6df6d2bc6b4d17603362ba6e2e21f72
- SHA1
  
  96b9a787da00da352755b931a72addae1542ce49
- SHA256
  
  13b35c954c3d9de779bcf72021e30142333bcf7ff7717cde2cce6c189a464b83
- SHA512
  
  067ffe9403226d15f12ade11c4a96dd6e9ca41636d6ed0fb3dd9a129c7f787ca9196e9f2cbcd55575f0aadd6fc46e2e964aae45376757848a1ba14ecdb958d08
- SSDEEP
  
  12288:uSEzqHKMbNUxEuOQYdn1xfq35ZQaj2QmeFMcugenvG6Qu8BdFW3twlFPJ0ZlrB6s:u5z87bSe8YdnQZjfm3crene8IM9wHx0s
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2