163c5db8ff5d6da725486749841705e441d967fcda70f3a03301f26052b0863a | Triage

Sharing

General

Target

20240906ce50ed54a539f85a378626c786c8a5fdmafia
Size

184KB
Sample

240906-s2lfqsvcne
MD5

ce50ed54a539f85a378626c786c8a5fd
SHA1

b0ac55b2a82533238a96233db46692490f763b65
SHA256

163c5db8ff5d6da725486749841705e441d967fcda70f3a03301f26052b0863a
SHA512

727fd07e6256c2d96760bb0b4f724794b3a530a163dcb2ea8cf5908f550a46b0860c33a2b8ccf0009daa7611059ff49eea3453625fe5b2954125a5d2fa075f8f
SSDEEP

3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3p:/7BSH8zUB+nGESaaRvoB7FJNndnY

Score

8^/10

discovery execution

Malware Config

Targets

- Target
  
  20240906ce50ed54a539f85a378626c786c8a5fdmafia
- Size
  
  184KB
- MD5
  
  ce50ed54a539f85a378626c786c8a5fd
- SHA1
  
  b0ac55b2a82533238a96233db46692490f763b65
- SHA256
  
  163c5db8ff5d6da725486749841705e441d967fcda70f3a03301f26052b0863a
- SHA512
  
  727fd07e6256c2d96760bb0b4f724794b3a530a163dcb2ea8cf5908f550a46b0860c33a2b8ccf0009daa7611059ff49eea3453625fe5b2954125a5d2fa075f8f
- SSDEEP
  
  3072:/MzsU0S0w8Hp9Rc/LB+dJGESR4hIRSYaVvb1NVFJNndnO3p:/7BSH8zUB+nGESaaRvoB7FJNndnY
Score

8^/10

discovery execution
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution