2978f0d36ed705360f958aca35c90297aed51869cb65f3ae978ab176a3b9ac32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2978f0d36ed705360f958aca35c90297aed51869cb65f3ae978ab176a3b9ac32N
Size

475KB
Sample

241018-hftvwavhnq
MD5

338ffd52b8a4e37c19ae0e46ca120df0
SHA1

b5ca27fc09ec861c06d3ba5f9fb5dd6ebf37a4fa
SHA256

2978f0d36ed705360f958aca35c90297aed51869cb65f3ae978ab176a3b9ac32
SHA512

cf1297d19ba09184b816223b6845295f70503ac0748248b9f54b5fbb93cafeef8d53f74012926218f8aaf8bd3075607245de2b2736642fd2b66aee5a2b191f59
SSDEEP

6144:0x6iVRLGDZLdHbTLvSAuYC27NkoTD/Eyf/To1ysI5uw7+WJz6lyqp3U+iyPmyQCJ:eF6v73qbL2vnTowJ6Vh+yPQ2rfcRYzT

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2978f0d36ed705360f958aca35c90297aed51869cb65f3ae978ab176a3b9ac32N
- Size
  
  475KB
- MD5
  
  338ffd52b8a4e37c19ae0e46ca120df0
- SHA1
  
  b5ca27fc09ec861c06d3ba5f9fb5dd6ebf37a4fa
- SHA256
  
  2978f0d36ed705360f958aca35c90297aed51869cb65f3ae978ab176a3b9ac32
- SHA512
  
  cf1297d19ba09184b816223b6845295f70503ac0748248b9f54b5fbb93cafeef8d53f74012926218f8aaf8bd3075607245de2b2736642fd2b66aee5a2b191f59
- SSDEEP
  
  6144:0x6iVRLGDZLdHbTLvSAuYC27NkoTD/Eyf/To1ysI5uw7+WJz6lyqp3U+iyPmyQCJ:eF6v73qbL2vnTowJ6Vh+yPQ2rfcRYzT
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2