e220436b5521f7b6171dc1b1e8e32cecdaf791dc51b85b3767866617c38a3628 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Payment Advice - Advice Ref[A22D4YdWsbE4] Priority payment Customer Ref2310069.exe
Size

642KB
Sample

240308-rnlznshb85
MD5

aeb6f43b1795970105081de9b7aa8e20
SHA1

9916adddc2290d4937ffc0c0d180aea33169f561
SHA256

e220436b5521f7b6171dc1b1e8e32cecdaf791dc51b85b3767866617c38a3628
SHA512

0c415f56fbbfe9332c14db26b244a0198839aa94d62da061cae23e8598e4b34ffd3ada278e83835fc7539de0014c1254ed69eaba67b28e16d5a0407a0bcef832
SSDEEP

12288:yaFtImAFprPERkK7zSFFnMMDRNfMQN+9zSVqhptuGx9d6xBi5dZxLx8RNz:v61FpAp7LQ49zOOptuaOi5TxLw

Score

7^/10

Malware Config

Targets

- Target
  
  Payment Advice - Advice Ref[A22D4YdWsbE4] Priority payment Customer Ref2310069.exe
- Size
  
  642KB
- MD5
  
  aeb6f43b1795970105081de9b7aa8e20
- SHA1
  
  9916adddc2290d4937ffc0c0d180aea33169f561
- SHA256
  
  e220436b5521f7b6171dc1b1e8e32cecdaf791dc51b85b3767866617c38a3628
- SHA512
  
  0c415f56fbbfe9332c14db26b244a0198839aa94d62da061cae23e8598e4b34ffd3ada278e83835fc7539de0014c1254ed69eaba67b28e16d5a0407a0bcef832
- SSDEEP
  
  12288:yaFtImAFprPERkK7zSFFnMMDRNfMQN+9zSVqhptuGx9d6xBi5dZxLx8RNz:v61FpAp7LQ49zOOptuaOi5TxLw
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2