98bb75b47671395812e633d4f871fac3796294105ee885f7627021b1ca0452ef

General

Target
JAWISI-FUZEK-ACATOHU.zip
Size 4KB
Sample260820-d7ykxsbc26
SHA256 98bb75b47671395812e633d4f871fac3796294105ee885f7627021b1ca0452ef
MD5 417921bb77a24f10c769a56b8f68787e
SHA1 ba1f7733dcb8e2aada8d3e72552b9186e05bf67b
SHA512 fb4b6baa7eb67ec3cb36fb6112075e865b80d8ea0d64e21f441b59cd9fc542a7025b2aead04d44cda41e4d6ab80204852144543d4351d2f175eada5ce35932d2
SSDEEP 96:afsVfnYCEue9DoqLDZQoJgGlAyQniMPdluAjHyhz9tw07hf:+CEVRZXgwhQjTuAjk9twgN
TLSH
T13E916D2FD913C788D9262FBD64F02528A6A16444376ADB1C4725497E62BE1F4070F43E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  JAWISI-FUZEK-ACATOHU.zip
- Size 4KB
- SHA256 98bb75b47671395812e633d4f871fac3796294105ee885f7627021b1ca0452ef
- MD5 417921bb77a24f10c769a56b8f68787e
- SHA1 ba1f7733dcb8e2aada8d3e72552b9186e05bf67b
- SHA512 fb4b6baa7eb67ec3cb36fb6112075e865b80d8ea0d64e21f441b59cd9fc542a7025b2aead04d44cda41e4d6ab80204852144543d4351d2f175eada5ce35932d2
- SSDEEP 96:afsVfnYCEue9DoqLDZQoJgGlAyQniMPdluAjHyhz9tw07hf:+CEVRZXgwhQjTuAjk9twgN
- TLSH
  T13E916D2FD913C788D9262FBD64F02528A6A16444376ADB1C4725497E62BE1F4070F43E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  JAWISI-FUZEK-ACATOHU.lnk
- Size 9KB
- SHA256 ecd2284e33819e8fc401f7eb385f7e0a4362ff973bd5f26ff76c58ef90e5128a
- MD5 460e65abe63bc4c8b991070691e85f54
- SHA1 a5873fa18f415924f02e1709034ae0f56fc7e5f7
- SHA512 47fce8f1b84efc9b9ef1554288b18c29e69de05329babb77118e0ebda7ee929ac5f54dd5afe47247d62ec2dc07d690b946de28ef51da04cba47da90ee8d56f20
- SSDEEP 192:8PYkX1OaSzmjQjwzyoOevjdlZhSPBNC0RV2hj:WYkllSzLj6yoOOjdMBo0j2
- TLSH
  T133122E2425FB6019D573FBBB4FDEA8AFDBB67661623A353A206043478601C05EE42339
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Indirect Command Execution
  Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
  defense_evasion
behavioral3 behavioral4