ab636ddd9646e8e98a21672149201588725849bfd1cc358c09a12d41c0c0c584 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab636ddd9646e8e98a21672149201588725849bfd1cc358c09a12d41c0c0c584
Size

84KB
Sample

221011-lhjdpsgchn
MD5

10ae22ec20c3d7de1e4fa9659d72e8c0
SHA1

32e3e4cacf791df1ea982c7d8203e8b88f87f4da
SHA256

ab636ddd9646e8e98a21672149201588725849bfd1cc358c09a12d41c0c0c584
SHA512

585caa058e603a1ff9f13d7c4454f2587e33ad4c95d32f0d104fc0212675924c2dee69f70c99d050669865aea4f3323c243b2781fb1743778dabd25ac12b5790
SSDEEP

1536:0jwr+Ucxh6+Nas8ZBG8QV2Jk0sL/joNPQO1:G3xRlVxB/EJD

Score

7^/10

Malware Config

Targets

- Target
  
  ab636ddd9646e8e98a21672149201588725849bfd1cc358c09a12d41c0c0c584
- Size
  
  84KB
- MD5
  
  10ae22ec20c3d7de1e4fa9659d72e8c0
- SHA1
  
  32e3e4cacf791df1ea982c7d8203e8b88f87f4da
- SHA256
  
  ab636ddd9646e8e98a21672149201588725849bfd1cc358c09a12d41c0c0c584
- SHA512
  
  585caa058e603a1ff9f13d7c4454f2587e33ad4c95d32f0d104fc0212675924c2dee69f70c99d050669865aea4f3323c243b2781fb1743778dabd25ac12b5790
- SSDEEP
  
  1536:0jwr+Ucxh6+Nas8ZBG8QV2Jk0sL/joNPQO1:G3xRlVxB/EJD
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2