895ef0ba31363d64ad7b66920ed66b4af636e0cdde04fe1d87ac1500180e16df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a28b9f263632cf20fa0c4efb58d08706.bin
Size

191KB
Sample

240614-czmb9asbqd
MD5

a28b9f263632cf20fa0c4efb58d08706
SHA1

ce3229fd7e2bfee62fcca1f19232e95c6540078e
SHA256

895ef0ba31363d64ad7b66920ed66b4af636e0cdde04fe1d87ac1500180e16df
SHA512

bb76ded21271540cb70a7aa69989a456a84196e902ce66a75a20199a8bf1fc5884ca6a64f73f77dd22e0568367933f669fb867d62ebf0f15d779b5f17f9d1cb4
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d4:HAVySV1eY4k437d+4wkTHdS2A

Score

7^/10

Malware Config

Targets

- Target
  
  a28b9f263632cf20fa0c4efb58d08706.bin
- Size
  
  191KB
- MD5
  
  a28b9f263632cf20fa0c4efb58d08706
- SHA1
  
  ce3229fd7e2bfee62fcca1f19232e95c6540078e
- SHA256
  
  895ef0ba31363d64ad7b66920ed66b4af636e0cdde04fe1d87ac1500180e16df
- SHA512
  
  bb76ded21271540cb70a7aa69989a456a84196e902ce66a75a20199a8bf1fc5884ca6a64f73f77dd22e0568367933f669fb867d62ebf0f15d779b5f17f9d1cb4
- SSDEEP
  
  3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d4:HAVySV1eY4k437d+4wkTHdS2A
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2