0d36a525dfefd64e4827353858dc13d9c90bceccc16a5f9b0970860696988abd | Triage

Sharing

General

Target

RG344997.zip
Size

1KB
Sample

240721-xgxqgssdqr
MD5

66c3f919332a3aa4a1d745f3f8d10576
SHA1

58e6c42347a55a20bb4d093c8bb609a21ab30102
SHA256

0d36a525dfefd64e4827353858dc13d9c90bceccc16a5f9b0970860696988abd
SHA512

2ee5b6eb8127f0555ad8ce10476de0779148e5335be482d9c8b51eafd54cf4ac59fe32a72763d61245b856249a8b7885a827db89614fda05468d66286c62da95

Score

7^/10

execution

Malware Config

Targets

- Target
  
  2239179153182514814.js
- Size
  
  4KB
- MD5
  
  bc3e1a83854c5555143fd0edb7e5219a
- SHA1
  
  3ba07850a8cdc95de5f4c8b1c9c05d179c75eafe
- SHA256
  
  d6eba30ffd309b255c327ca8015ef8717486af5ad18c051d90cd635a04ba325c
- SHA512
  
  d88f55240c27ba03697c934d00d1a69c4d3df22f3a5b3f09b0dce4ede0ff8018448d086bf12b48cf18b30717be0e4ec9b9e04360a197633006b2ff72e27fcad7
- SSDEEP
  
  96:xOT+F+r6isBysiqZ3id133OAk7ngBaid133OPz:/MahimAkfimPz
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2