16ab80de994e7725b290c75ba04cd1c573f4ff27dceeddac383feef68e8619d6 | Triage

Sharing

General

Target

16ab80de994e7725b290c75ba04cd1c573f4ff27dceeddac383feef68e8619d6
Size

1.9MB
Sample

240810-tskzaa1eqd
MD5

7dff94df36e6e229ee7d60702dccf9a7
SHA1

afe8a420e8e1ea6d06a4a46b217411f9d51044c3
SHA256

16ab80de994e7725b290c75ba04cd1c573f4ff27dceeddac383feef68e8619d6
SHA512

ec2a7f35b35b57e9690a0c27df64e8aca4f8349821e89e86033bcb9381851f6f1083ce5544ce7e3541cac11432168728d378ced3a4f07e5f47517cb929d41436
SSDEEP

49152:41TPH4hrPGi6B5LLxZKVnF1/eZ5XGgGGsQnDXvY4Rxkck5:41T/y71gGYxkL5

Score

7^/10

Malware Config

Targets

- Target
  
  16ab80de994e7725b290c75ba04cd1c573f4ff27dceeddac383feef68e8619d6
- Size
  
  1.9MB
- MD5
  
  7dff94df36e6e229ee7d60702dccf9a7
- SHA1
  
  afe8a420e8e1ea6d06a4a46b217411f9d51044c3
- SHA256
  
  16ab80de994e7725b290c75ba04cd1c573f4ff27dceeddac383feef68e8619d6
- SHA512
  
  ec2a7f35b35b57e9690a0c27df64e8aca4f8349821e89e86033bcb9381851f6f1083ce5544ce7e3541cac11432168728d378ced3a4f07e5f47517cb929d41436
- SSDEEP
  
  49152:41TPH4hrPGi6B5LLxZKVnF1/eZ5XGgGGsQnDXvY4Rxkck5:41T/y71gGYxkL5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2