dc083f45435a815b292e56c0ce54a243f0df926573531ee885d02728a41d74e7 | Triage

Sharing

General

Target

2024-06-16_5542c9a5732f6fe700c62cbc438acc27_mafia
Size

184KB
Sample

240616-r9zsna1gpk
MD5

5542c9a5732f6fe700c62cbc438acc27
SHA1

384cf65ac0475bdba5362f1647d5d2eb49e58426
SHA256

dc083f45435a815b292e56c0ce54a243f0df926573531ee885d02728a41d74e7
SHA512

b1bf98cd3eb0e8ec4aa6825542e2f3e9c1173ebcb6b4ef709a467461b24fe523cc114fc5a20b765702cf3e24789c2844bceba8be6e1297716a40eea57149d653
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3YN:/7BSH8zUB+nGESaaRvoB7FJNndn9N

Score

8^/10

execution

Malware Config

Targets

- Target
  
  2024-06-16_5542c9a5732f6fe700c62cbc438acc27_mafia
- Size
  
  184KB
- MD5
  
  5542c9a5732f6fe700c62cbc438acc27
- SHA1
  
  384cf65ac0475bdba5362f1647d5d2eb49e58426
- SHA256
  
  dc083f45435a815b292e56c0ce54a243f0df926573531ee885d02728a41d74e7
- SHA512
  
  b1bf98cd3eb0e8ec4aa6825542e2f3e9c1173ebcb6b4ef709a467461b24fe523cc114fc5a20b765702cf3e24789c2844bceba8be6e1297716a40eea57149d653
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3YN:/7BSH8zUB+nGESaaRvoB7FJNndn9N
Score

8^/10

execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2