d17b399166d9400cd0650d0d967a6bb598e3c867a2a73a286b80326d424b6756 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d17b399166d9400cd0650d0d967a6bb598e3c867a2a73a286b80326d424b6756.zip
Size

1KB
Sample

240709-ybf18atarg
MD5

c6135a749dcb63ca6af44e905cd3000c
SHA1

11670fec73acc47dcf03180cddb9efb5a80b538a
SHA256

d17b399166d9400cd0650d0d967a6bb598e3c867a2a73a286b80326d424b6756
SHA512

71fa2a11c1801c91c0acfd827c7b0b50d1eda495580d1b190748a7cbae843ca0bb7b571592ffd1b42454603bf969685c4ee0f99d0b0c1c74d719c337bc670dfc

Score

7^/10

execution

Malware Config

Targets

- Target
  
  328113244235437104.js
- Size
  
  5KB
- MD5
  
  35214e3fef560c726de1c04b907230db
- SHA1
  
  307744cedef7d96509f88141ebf588d6532264f3
- SHA256
  
  676ce5db5660988893ce4f9dbbbb86f2524181ce05d1ba35669bbff50422e5a0
- SHA512
  
  7e150f3784285b19a57d9e1a25948397df1685aa0b7fd6c850ecc8e5ea7f7128c47bbbc5cb5d4254002c46b123e99e9e9bdfad4f9fcd0615077809ea05e5c8e7
- SSDEEP
  
  96:4ki3XMtf2uTWxqECOEYLqQjNSOtq7OmZkkiz:sXMtf2uTWsrOt5pPLEkkiz
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2