91ff4b06f7998bb1adb5e183e8b3440a5f7fa743190f31f58ddf3fada68e51e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FİYAT TEKLİF İSTEĞİ_xlxs.exe
Size

706KB
Sample

240221-ql9ghsgd52
MD5

3b66f5cd3ac2b96b2c4ef0c16433bb10
SHA1

39a1a67b97555455ed93bcc37cfd931c3b73708a
SHA256

91ff4b06f7998bb1adb5e183e8b3440a5f7fa743190f31f58ddf3fada68e51e4
SHA512

2c9d8398cec02b01ae2dbd7a2159bda8f19875c42de89f315c78a11c993f213428ef7af3e029dd62224360e501da8f31910a14e7a353b877288792b59df2b4e2
SSDEEP

12288:P5y42h0I8X7uXoqzmlhL8/7kBI/GF5Y278qpOg56cB40R0MuC2iN:w42yQpyq7kBI/GF5b78V06cxOMuC1

Score

7^/10

Malware Config

Targets

- Target
  
  FİYAT TEKLİF İSTEĞİ_xlxs.exe
- Size
  
  706KB
- MD5
  
  3b66f5cd3ac2b96b2c4ef0c16433bb10
- SHA1
  
  39a1a67b97555455ed93bcc37cfd931c3b73708a
- SHA256
  
  91ff4b06f7998bb1adb5e183e8b3440a5f7fa743190f31f58ddf3fada68e51e4
- SHA512
  
  2c9d8398cec02b01ae2dbd7a2159bda8f19875c42de89f315c78a11c993f213428ef7af3e029dd62224360e501da8f31910a14e7a353b877288792b59df2b4e2
- SSDEEP
  
  12288:P5y42h0I8X7uXoqzmlhL8/7kBI/GF5Y278qpOg56cB40R0MuC2iN:w42yQpyq7kBI/GF5b78V06cxOMuC1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2