f12db062c66614165cae0d123eb32b352031fc461a6f7df63cc8459cb9f2e5b7 | Triage

Sharing

General

Target

f12db062c66614165cae0d123eb32b352031fc461a6f7df63cc8459cb9f2e5b7
Size

61KB
Sample

221011-tty8asdfem
MD5

6b1a6103b4596e3b277889eacec120d0
SHA1

f8f8e4ef5cfc0de24a6e7769d258347287eb751a
SHA256

f12db062c66614165cae0d123eb32b352031fc461a6f7df63cc8459cb9f2e5b7
SHA512

964fc200d85495d710a549662331fbd8b4189d63ed39e1e9c58baff0c1a9e9c7b2d6a1d9b531f73cb94627698401a5b79e7e73ecf3b937f10cea4b82748b9cff
SSDEEP

768:IuKvnyXz8IkpurAUzIq8PQAXH29WYz6dO9Uc7+fx6ywgxKFe74sI:IbvnyXgvpurAUMq8PR2wYOdOCiug7ea

Score

8^/10

Malware Config

Targets

- Target
  
  f12db062c66614165cae0d123eb32b352031fc461a6f7df63cc8459cb9f2e5b7
- Size
  
  61KB
- MD5
  
  6b1a6103b4596e3b277889eacec120d0
- SHA1
  
  f8f8e4ef5cfc0de24a6e7769d258347287eb751a
- SHA256
  
  f12db062c66614165cae0d123eb32b352031fc461a6f7df63cc8459cb9f2e5b7
- SHA512
  
  964fc200d85495d710a549662331fbd8b4189d63ed39e1e9c58baff0c1a9e9c7b2d6a1d9b531f73cb94627698401a5b79e7e73ecf3b937f10cea4b82748b9cff
- SSDEEP
  
  768:IuKvnyXz8IkpurAUzIq8PQAXH29WYz6dO9Uc7+fx6ywgxKFe74sI:IbvnyXgvpurAUMq8PR2wYOdOCiug7ea
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2