bd0dfde8e40a9ebbad1fae43ee9a99f5fd936f6db7fa4c4f9800df1bdc7eb104 | Triage

Sharing

General

Target

bd0dfde8e40a9ebbad1fae43ee9a99f5fd936f6db7fa4c4f9800df1bdc7eb104
Size

213KB
Sample

220919-tkahksbgcn
MD5

792a46d84a2ac219f4d90c819fc10578
SHA1

dc3cff81ca482b71e1be8870c0e38d98bd4d9710
SHA256

bd0dfde8e40a9ebbad1fae43ee9a99f5fd936f6db7fa4c4f9800df1bdc7eb104
SHA512

37fb632252e93c9419f0eef0e534fe58b169652f9ce1ef0f1f3439aa03c4482cf39caebdd52df74ffcee3f91e0ca9a2a3f071f0c523fa55f53594795409a00fe
SSDEEP

3072:WGf6viAIxc9LNyRulW1fyNi2i9sn4SK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1Ksvf0q907Q7DF43jF

Score

7^/10

Malware Config

Targets

- Target
  
  bd0dfde8e40a9ebbad1fae43ee9a99f5fd936f6db7fa4c4f9800df1bdc7eb104
- Size
  
  213KB
- MD5
  
  792a46d84a2ac219f4d90c819fc10578
- SHA1
  
  dc3cff81ca482b71e1be8870c0e38d98bd4d9710
- SHA256
  
  bd0dfde8e40a9ebbad1fae43ee9a99f5fd936f6db7fa4c4f9800df1bdc7eb104
- SHA512
  
  37fb632252e93c9419f0eef0e534fe58b169652f9ce1ef0f1f3439aa03c4482cf39caebdd52df74ffcee3f91e0ca9a2a3f071f0c523fa55f53594795409a00fe
- SSDEEP
  
  3072:WGf6viAIxc9LNyRulW1fyNi2i9sn4SK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1Ksvf0q907Q7DF43jF
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2