985c6a2f776193878303c9feab070a972358949a5fcf6174ee65ca175e074eb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

[email protected]
Size

13.0MB
Sample

240310-nlvx1sca5y
MD5

83a62244562efe7349a9a3ab8100baf3
SHA1

6be85d47dc407495e40f6ee1ae065c3539f547da
SHA256

985c6a2f776193878303c9feab070a972358949a5fcf6174ee65ca175e074eb5
SHA512

208f69eab0baa5e8f7a8840f092f2952e305b67dba1f87f067b1f3fa7fc043abf20f16f81c941a60b02f9dc780d10719adfbed58b3ae8958e561c8b1f9831637
SSDEEP

393216:q3B/08MittPG5fVYji5CwpmwnMQHU1iG5Z:q3i8MitpcfVYj0CoK

Score

7^/10

Malware Config

Targets

- Target
  
  [email protected]
- Size
  
  13.0MB
- MD5
  
  83a62244562efe7349a9a3ab8100baf3
- SHA1
  
  6be85d47dc407495e40f6ee1ae065c3539f547da
- SHA256
  
  985c6a2f776193878303c9feab070a972358949a5fcf6174ee65ca175e074eb5
- SHA512
  
  208f69eab0baa5e8f7a8840f092f2952e305b67dba1f87f067b1f3fa7fc043abf20f16f81c941a60b02f9dc780d10719adfbed58b3ae8958e561c8b1f9831637
- SSDEEP
  
  393216:q3B/08MittPG5fVYji5CwpmwnMQHU1iG5Z:q3i8MitpcfVYj0CoK
Score

1^/10
behavioral1 behavioral2
- Target
  
  Active_Setup_File/[email protected]
- Size
  
  13.0MB
- MD5
  
  39039faeece3b3e7584df3948b4c6416
- SHA1
  
  004b63add12c9db6a650c3dbc5b29a44378320f2
- SHA256
  
  a4a82d859f917b5f915a9c585b975882712eb37b706c8ce93f66536a298d5e8f
- SHA512
  
  a626ef5bc541fb9361cd0a505bd3384cc1cc324d30585d9706e3ece7dedab070edc24540ae237cfd020d9091004c835fa5481d4095f4054a1f53936362ed3014
- SSDEEP
  
  393216:i3B/08MittPG5fVYji5CwpmwnMQHU1iG5i:i3i8MitpcfVYj0Cof
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4