4f74f90b51f8b0db0d1d3e62a82a8af88956fa7a8bac6409f412444dd14e4aaf | Triage

Sharing

General

Target

4f74f90b51f8b0db0d1d3e62a82a8af88956fa7a8bac6409f412444dd14e4aaf
Size

44KB
Sample

221002-jfexdseac4
MD5

63fb6a6c26832825086d4ff5727153a0
SHA1

a32088b47bcc5dca84965cf10e17f73e92e2979b
SHA256

4f74f90b51f8b0db0d1d3e62a82a8af88956fa7a8bac6409f412444dd14e4aaf
SHA512

13cf6a2a56779b8300f9291afda1ddcec260a96a1a9844284a687f1e3bdbbd9231edf23db8927d43644325edca6309e522e60c741ef65b51929a4ab0b8fb3e0f
SSDEEP

384:cbE8r54uJsHa0NLnIzx0x2b2vjPxz3w8Du3jsBYRAGryf4pxI/6ps2QdhA4I7m36:eE8auAakDI90Ksw8gpyf4pxGAv5N

Score

7^/10

Malware Config

Targets

- Target
  
  4f74f90b51f8b0db0d1d3e62a82a8af88956fa7a8bac6409f412444dd14e4aaf
- Size
  
  44KB
- MD5
  
  63fb6a6c26832825086d4ff5727153a0
- SHA1
  
  a32088b47bcc5dca84965cf10e17f73e92e2979b
- SHA256
  
  4f74f90b51f8b0db0d1d3e62a82a8af88956fa7a8bac6409f412444dd14e4aaf
- SHA512
  
  13cf6a2a56779b8300f9291afda1ddcec260a96a1a9844284a687f1e3bdbbd9231edf23db8927d43644325edca6309e522e60c741ef65b51929a4ab0b8fb3e0f
- SSDEEP
  
  384:cbE8r54uJsHa0NLnIzx0x2b2vjPxz3w8Du3jsBYRAGryf4pxI/6ps2QdhA4I7m36:eE8auAakDI90Ksw8gpyf4pxGAv5N
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2