52597745467cbfa5dea28af4334512c154c9b82c858d79e6f6b39462486b22a7 | Triage

Sharing

General

Target

52597745467cbfa5dea28af4334512c154c9b82c858d79e6f6b39462486b22a7
Size

104KB
Sample

221003-h2wxcsechk
MD5

5d20dd711e0a19bdf3a18d900ffd7e00
SHA1

89f9a72996a7b1dfabd025a91ed721d70ef1ee2c
SHA256

52597745467cbfa5dea28af4334512c154c9b82c858d79e6f6b39462486b22a7
SHA512

bcfa842e1fa6089c023943a8cd262742748ff34064d07996b862dc45ff4068fed79bdd504650584aa45e4a3fafd480fe1694339156b7848b3bb6d43e966069c6
SSDEEP

1536:nlxb38MhDn2fkNKnL6yId2xdMGfR9TQ2g8cifaxK2jd3psK/OV16PZdpM2KczgBW:YsNKnL6K7f3ixF2o9RH5BbtmHpfq

Score

7^/10

Malware Config

Targets

- Target
  
  52597745467cbfa5dea28af4334512c154c9b82c858d79e6f6b39462486b22a7
- Size
  
  104KB
- MD5
  
  5d20dd711e0a19bdf3a18d900ffd7e00
- SHA1
  
  89f9a72996a7b1dfabd025a91ed721d70ef1ee2c
- SHA256
  
  52597745467cbfa5dea28af4334512c154c9b82c858d79e6f6b39462486b22a7
- SHA512
  
  bcfa842e1fa6089c023943a8cd262742748ff34064d07996b862dc45ff4068fed79bdd504650584aa45e4a3fafd480fe1694339156b7848b3bb6d43e966069c6
- SSDEEP
  
  1536:nlxb38MhDn2fkNKnL6yId2xdMGfR9TQ2g8cifaxK2jd3psK/OV16PZdpM2KczgBW:YsNKnL6K7f3ixF2o9RH5BbtmHpfq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2