99c074ad455af64c03b4938d6844dc8d3a96e8713cf525f126b15e25fcd52d90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99c074ad455af64c03b4938d6844dc8d3a96e8713cf525f126b15e25fcd52d90
Size

76KB
Sample

221002-aey47sdaf9
MD5

652102f0db6368e98e6dffdd6498b7a0
SHA1

9a9dc3e5cee442196e8df3dd7e1b01f103eae722
SHA256

99c074ad455af64c03b4938d6844dc8d3a96e8713cf525f126b15e25fcd52d90
SHA512

268552b502ef53af6c8234b84738a26b1360dce63fbfe35fe9a097d511120da8d57ca878181cf4a892142ee8d585ad1d97863b84f803adcac530e2887c126979
SSDEEP

1536:VidlOpAR0c+o3Kef6b4B4qnjmNHp00HJazt+ZpRN:AdguofbMnyw0HJaRgN

Score

7^/10

Malware Config

Targets

- Target
  
  99c074ad455af64c03b4938d6844dc8d3a96e8713cf525f126b15e25fcd52d90
- Size
  
  76KB
- MD5
  
  652102f0db6368e98e6dffdd6498b7a0
- SHA1
  
  9a9dc3e5cee442196e8df3dd7e1b01f103eae722
- SHA256
  
  99c074ad455af64c03b4938d6844dc8d3a96e8713cf525f126b15e25fcd52d90
- SHA512
  
  268552b502ef53af6c8234b84738a26b1360dce63fbfe35fe9a097d511120da8d57ca878181cf4a892142ee8d585ad1d97863b84f803adcac530e2887c126979
- SSDEEP
  
  1536:VidlOpAR0c+o3Kef6b4B4qnjmNHp00HJazt+ZpRN:AdguofbMnyw0HJaRgN
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2