4a36cb3d686de3ed35de293d649d637b81bb585faf282c08107aba100c6acc05 | Triage

Sharing

General

Target

4a36cb3d686de3ed35de293d649d637b81bb585faf282c08107aba100c6acc05
Size

20KB
Sample

221002-at32psdgd3
MD5

6e43b097540509dd0628b3fffaa65ad0
SHA1

b5ae8cbcb11a0c3750fc735ec0fdfb724d4d33d8
SHA256

4a36cb3d686de3ed35de293d649d637b81bb585faf282c08107aba100c6acc05
SHA512

619789287720f1f6ba0f0175d5615235b69a4153166a33ab7446974a8566c3744b633648ed4e915c6459da569d2302a31341ab5f2bb2d49cb11e5b535dbe545a
SSDEEP

384:V+d5di3+PfZsDiM3PfsBhnRGjLbjnsJzTwJcecqybQ1:QfdPf41ETHw2dqybi

Score

7^/10

Malware Config

Targets

- Target
  
  4a36cb3d686de3ed35de293d649d637b81bb585faf282c08107aba100c6acc05
- Size
  
  20KB
- MD5
  
  6e43b097540509dd0628b3fffaa65ad0
- SHA1
  
  b5ae8cbcb11a0c3750fc735ec0fdfb724d4d33d8
- SHA256
  
  4a36cb3d686de3ed35de293d649d637b81bb585faf282c08107aba100c6acc05
- SHA512
  
  619789287720f1f6ba0f0175d5615235b69a4153166a33ab7446974a8566c3744b633648ed4e915c6459da569d2302a31341ab5f2bb2d49cb11e5b535dbe545a
- SSDEEP
  
  384:V+d5di3+PfZsDiM3PfsBhnRGjLbjnsJzTwJcecqybQ1:QfdPf41ETHw2dqybi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2