7c0e8063ee0d5bcab4bc436a0d59a0674c13cb6f5133a9a0838395c092513ee3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c0e8063ee0d5bcab4bc436a0d59a0674c13cb6f5133a9a0838395c092513ee3
Size

36KB
Sample

221002-11wt3scff9
MD5

6df7163edd555ddbdb347b6aa9eb89aa
SHA1

7be1cf4e1dd0709564949430ed3ce7f675413594
SHA256

7c0e8063ee0d5bcab4bc436a0d59a0674c13cb6f5133a9a0838395c092513ee3
SHA512

58b6667d050bccbd6a3fab66ae00ef9a55c262304e8ee744b91cc5cbf3654beec80874fc7461c6afff15c0b824514add94a8cf1ea4c237ae203df2e56767dcbd
SSDEEP

768:bxJjK/bMVNH+TZ3/D+DfRKe09O8HLsiP:b6/bMScse6HA

Score

7^/10

Malware Config

Targets

- Target
  
  7c0e8063ee0d5bcab4bc436a0d59a0674c13cb6f5133a9a0838395c092513ee3
- Size
  
  36KB
- MD5
  
  6df7163edd555ddbdb347b6aa9eb89aa
- SHA1
  
  7be1cf4e1dd0709564949430ed3ce7f675413594
- SHA256
  
  7c0e8063ee0d5bcab4bc436a0d59a0674c13cb6f5133a9a0838395c092513ee3
- SHA512
  
  58b6667d050bccbd6a3fab66ae00ef9a55c262304e8ee744b91cc5cbf3654beec80874fc7461c6afff15c0b824514add94a8cf1ea4c237ae203df2e56767dcbd
- SSDEEP
  
  768:bxJjK/bMVNH+TZ3/D+DfRKe09O8HLsiP:b6/bMScse6HA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2