ff2f0f91ad490a40471063e0d41f955d29b24b9387b473e4248cced15faa4730 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Bileşik Platform Yedek Parca YENI SIPARIŞ RFQ 120120310.exe
Size

642KB
Sample

240312-qw1blaca97
MD5

93c5cde89baa52e239e680a5c47c14f1
SHA1

365cb3541bc98f0ae6fcc948120322a3ca878f22
SHA256

ff2f0f91ad490a40471063e0d41f955d29b24b9387b473e4248cced15faa4730
SHA512

900d96b161c7ecaf56eb4be16ee266d03bed6f50725a3dda125ef987bf639a69bac4b2df5c7dd9a310edf03f5a64247a957cea502fe1a77b4fb583945eec5689
SSDEEP

12288:tsJTENl3SGWSMlchuDJCwjWanpowS7IwGny2CgId/YtoG/w:uxENlCLSzhuDJ3jHS7IwGdCgIdgB

Score

7^/10

Malware Config

Targets

- Target
  
  Bileşik Platform Yedek Parca YENI SIPARIŞ RFQ 120120310.exe
- Size
  
  642KB
- MD5
  
  93c5cde89baa52e239e680a5c47c14f1
- SHA1
  
  365cb3541bc98f0ae6fcc948120322a3ca878f22
- SHA256
  
  ff2f0f91ad490a40471063e0d41f955d29b24b9387b473e4248cced15faa4730
- SHA512
  
  900d96b161c7ecaf56eb4be16ee266d03bed6f50725a3dda125ef987bf639a69bac4b2df5c7dd9a310edf03f5a64247a957cea502fe1a77b4fb583945eec5689
- SSDEEP
  
  12288:tsJTENl3SGWSMlchuDJCwjWanpowS7IwGny2CgId/YtoG/w:uxENlCLSzhuDJ3jHS7IwGdCgIdgB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2