41ef11ba92f2cb2427404054fe1824f33191f25023fe7f9b87a126ed4e06ded1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ef11ba92f2cb2427404054fe1824f33191f25023fe7f9b87a126ed4e06ded1
Size

110KB
Sample

220919-wlmweafcep
MD5

1390c982cb71da55c76ad9e8b196698c
SHA1

0ba69e19a0bd51dceb614a7672e58066fea7674c
SHA256

41ef11ba92f2cb2427404054fe1824f33191f25023fe7f9b87a126ed4e06ded1
SHA512

751c4dee5e6a115fd99debff2468aaa4d818c7d11612cb6f256ffad7d017f1db3e3a5677ee62c381a59570a7fa45e6baaa041e5f6a943a8377af57a17a99db63
SSDEEP

1536:AUAdaM1qL7ZpRlu7XqCvO1/WYBpR6kS/Vqy9DhAobOBUFQX1nWz:A9djM3u7Xq1BPy3hoUFkpW

Score

7^/10

Malware Config

Targets

- Target
  
  41ef11ba92f2cb2427404054fe1824f33191f25023fe7f9b87a126ed4e06ded1
- Size
  
  110KB
- MD5
  
  1390c982cb71da55c76ad9e8b196698c
- SHA1
  
  0ba69e19a0bd51dceb614a7672e58066fea7674c
- SHA256
  
  41ef11ba92f2cb2427404054fe1824f33191f25023fe7f9b87a126ed4e06ded1
- SHA512
  
  751c4dee5e6a115fd99debff2468aaa4d818c7d11612cb6f256ffad7d017f1db3e3a5677ee62c381a59570a7fa45e6baaa041e5f6a943a8377af57a17a99db63
- SSDEEP
  
  1536:AUAdaM1qL7ZpRlu7XqCvO1/WYBpR6kS/Vqy9DhAobOBUFQX1nWz:A9djM3u7Xq1BPy3hoUFkpW
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2