6d2c124acc6216abe90f4de656e05b50bdc3c82fb32b54a88a1b5a718040a5b8 | Triage

Sharing

General

Target

6d2c124acc6216abe90f4de656e05b50bdc3c82fb32b54a88a1b5a718040a5b8
Size

43KB
Sample

221004-edx8qsbdb7
MD5

416f32ef85705c0f6d5cec89cf125910
SHA1

f1af8b7ce38654856ba5f8dda61aac51174c5438
SHA256

6d2c124acc6216abe90f4de656e05b50bdc3c82fb32b54a88a1b5a718040a5b8
SHA512

0b5685996e1bbff067747e93149f5b7efe849f067df210ce0026de79f05e2006cbaada343ab78b364ae1b9491ac7a6d77fc14a874a140aa95cefd435c4e0bb9e
SSDEEP

384:vOvGx6tGuPY2qePQYTtPKt6xl/r9XRmmEtrNxv33YmlfJlngBWGEN82GXmhNnBT3:vOWP2lQY5ytmlza3NqmPGNES2mSn9FH

Score

7^/10

Malware Config

Targets

- Target
  
  6d2c124acc6216abe90f4de656e05b50bdc3c82fb32b54a88a1b5a718040a5b8
- Size
  
  43KB
- MD5
  
  416f32ef85705c0f6d5cec89cf125910
- SHA1
  
  f1af8b7ce38654856ba5f8dda61aac51174c5438
- SHA256
  
  6d2c124acc6216abe90f4de656e05b50bdc3c82fb32b54a88a1b5a718040a5b8
- SHA512
  
  0b5685996e1bbff067747e93149f5b7efe849f067df210ce0026de79f05e2006cbaada343ab78b364ae1b9491ac7a6d77fc14a874a140aa95cefd435c4e0bb9e
- SSDEEP
  
  384:vOvGx6tGuPY2qePQYTtPKt6xl/r9XRmmEtrNxv33YmlfJlngBWGEN82GXmhNnBT3:vOWP2lQY5ytmlza3NqmPGNES2mSn9FH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2