210f709308b236faa3a3d2d80835dcc58595d788ae4b691566c18c56ae902277 | Triage

Sharing

General

Target

$R0H9FZL.lnk
Size

1KB
Sample

240919-hdzy4svgmf
MD5

7490de7328c0d8bbb3befa473e737c5b
SHA1

a6b032325f7cadf5df455e16acd778e165c6acef
SHA256

210f709308b236faa3a3d2d80835dcc58595d788ae4b691566c18c56ae902277
SHA512

2d741b3e544163e0560e7fc405cd570279ecae212297181d543f9aff0523f2955ed7189207b47297f0b59250740b36b93872967e9588964a1c61dfd517eddc11

Score

7^/10

Malware Config

Targets

- Target
  
  Device/HarddiskVolume3/$Recycle.Bin/S-1-5-21-1609150881-1430008545-2034545098-1122/$R0H9FZL.lnk
- Size
  
  850B
- MD5
  
  b380de9c33f47a45008bbec8cca24120
- SHA1
  
  df471da1deeb2a022e9e359b49a2fce890ff3d83
- SHA256
  
  4297e0997a42a0fc83b869779532528567b4b6fd3e0f9d1baa66d749ae255146
- SHA512
  
  b7c27caf6b197bd8b93759c2690e4747af975d64e9811de8ec6c7b3a3e0222874f5bf5014f60e0a60b7b9013abf2d4b836f43a6593678648f7c8806f2ed85019
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2