8ddfd6770466485cb93e9643aa8c1d3310daa2d628596a12ee21b5b9e1aa18a6 | Triage

Sharing

General

Target

8ddfd6770466485cb93e9643aa8c1d3310daa2d628596a12ee21b5b9e1aa18a6
Size

86KB
Sample

221002-afg73sdba3
MD5

478534b42fdbd2f443c008d4c2181e00
SHA1

ecc24a684344b45f2746907d23fb1a9bf4175e4d
SHA256

8ddfd6770466485cb93e9643aa8c1d3310daa2d628596a12ee21b5b9e1aa18a6
SHA512

2b59c992c2f1ff4b2bca96a3a41fee409eb3d461b582dda40a3815084d0f29d7a877ea3573bbe3aebbea504dfd288a45865892f654a49e31289bb37e21be4eb2
SSDEEP

768:K6wmiqe569gNZQcEbDxs1Ar/kUBlefkjv7hCjeLxyH6Pq5wIEQOx7EhuSwj/Z/0e:K6wBcgNe/IiMclCuCjeeoq5EQOHr9V

Score

7^/10

Malware Config

Targets

- Target
  
  8ddfd6770466485cb93e9643aa8c1d3310daa2d628596a12ee21b5b9e1aa18a6
- Size
  
  86KB
- MD5
  
  478534b42fdbd2f443c008d4c2181e00
- SHA1
  
  ecc24a684344b45f2746907d23fb1a9bf4175e4d
- SHA256
  
  8ddfd6770466485cb93e9643aa8c1d3310daa2d628596a12ee21b5b9e1aa18a6
- SHA512
  
  2b59c992c2f1ff4b2bca96a3a41fee409eb3d461b582dda40a3815084d0f29d7a877ea3573bbe3aebbea504dfd288a45865892f654a49e31289bb37e21be4eb2
- SSDEEP
  
  768:K6wmiqe569gNZQcEbDxs1Ar/kUBlefkjv7hCjeLxyH6Pq5wIEQOx7EhuSwj/Z/0e:K6wBcgNe/IiMclCuCjeeoq5EQOHr9V
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2