0a4d7ed03798e5257a21afc76553e538486316389bd54c9b9bcc03699ae21cd3 | Triage

Sharing

General

Target

0a4d7ed03798e5257a21afc76553e538486316389bd54c9b9bcc03699ae21cd3
Size

769KB
Sample

240319-xfl8cscd4z
MD5

c6fea3621cca858371f2d596c9723891
SHA1

48a23b6c768a4a4f8ba2864159f959c0e025f08a
SHA256

0a4d7ed03798e5257a21afc76553e538486316389bd54c9b9bcc03699ae21cd3
SHA512

c3c7973b774c9cbe0888ebf4858b617a4431cb614a38d260ebefa3717ee932ccb0e93a14159aa6856aa0094e13627a1c8a071fdfff3639f5b14194af3a3d1bf4
SSDEEP

12288:9ZZYXK0z6bPETqd/a0hQ6o0No0mo09dCAMdCAHdCAwrH/cfwwGHCfu1eUgzpCGKD:9cXKp2b0y6fgli7vwPifu1d0yQ314

Score

8^/10

Malware Config

Targets

- Target
  
  0a4d7ed03798e5257a21afc76553e538486316389bd54c9b9bcc03699ae21cd3
- Size
  
  769KB
- MD5
  
  c6fea3621cca858371f2d596c9723891
- SHA1
  
  48a23b6c768a4a4f8ba2864159f959c0e025f08a
- SHA256
  
  0a4d7ed03798e5257a21afc76553e538486316389bd54c9b9bcc03699ae21cd3
- SHA512
  
  c3c7973b774c9cbe0888ebf4858b617a4431cb614a38d260ebefa3717ee932ccb0e93a14159aa6856aa0094e13627a1c8a071fdfff3639f5b14194af3a3d1bf4
- SSDEEP
  
  12288:9ZZYXK0z6bPETqd/a0hQ6o0No0mo09dCAMdCAHdCAwrH/cfwwGHCfu1eUgzpCGKD:9cXKp2b0y6fgli7vwPifu1d0yQ314
Score

8^/10
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2