745dc49c291978ff051d745a3e2aad3b430e48e37ed4ec6fcd8b3a983136df1a | Triage

Sharing

General

Target

Rechnung-RG156741.zip
Size

1KB
Sample

240722-g9nehstbkm
MD5

ec1e0b3fc0062e56d448e1e547249b31
SHA1

a8ca1849fafaeafde5bbf1ad03c45c5e0a81317d
SHA256

745dc49c291978ff051d745a3e2aad3b430e48e37ed4ec6fcd8b3a983136df1a
SHA512

28c0edeea25e3e9f111c6f4620d2f0d0aabf7474d48349fef2a750a77ab09aa267c2c510924c87e127e8710ff9cd1848d4115874ba1670db1c86a5773b227daf

Score

7^/10

execution

Malware Config

Targets

- Target
  
  16079118292358610671.js
- Size
  
  5KB
- MD5
  
  f4a840ed7451b47d5e34da87dda62dc3
- SHA1
  
  7a24980489137b874d969603a74b60622492d11f
- SHA256
  
  b66a0e075cc0eb03531b24c06ae099caf5927180992dbac43abec6eb87f2cc8b
- SHA512
  
  18257d119b61a348df64cb2863fec68f848d6036e6761d8855cf3970ab1a0a4298e9ff09531f7d57c81d66a146d62f380d6c649bca4b53a8fa65ae99aab5f7e6
- SSDEEP
  
  96:JgwCaj0GI/2tZtcF6AkqjZtcF6cehLLOY:awbj0GQ4ZtcAAkqjZtcAceh
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2