45dae211bbabcd5b2d83dbd64c0e0a0fd09f0eeffb087e8e60720775fb2e68c2 | Triage

Sharing

General

Target

45dae211bbabcd5b2d83dbd64c0e0a0fd09f0eeffb087e8e60720775fb2e68c2
Size

36KB
Sample

221012-sapdbagcc3
MD5

6c9f56a74bd21d4caa2310df5c72e580
SHA1

a65252ea793385d784fd2d0c3a336b52978fceb4
SHA256

45dae211bbabcd5b2d83dbd64c0e0a0fd09f0eeffb087e8e60720775fb2e68c2
SHA512

812136bdf1a4e0f24a4e6a4bb116eeb4f0e6e258e63fee66f45de2da26b63fd4d489e99fd23bdd319f65e7ac1f4b61fb3c0b1bb669dc76b57049c1a7a6fc902b
SSDEEP

768:M+5CfzSjYCr1+bAkpalxUkDUoj/o5R5R:MKCfzuuaFUoDuLR

Score

7^/10

Malware Config

Targets

- Target
  
  45dae211bbabcd5b2d83dbd64c0e0a0fd09f0eeffb087e8e60720775fb2e68c2
- Size
  
  36KB
- MD5
  
  6c9f56a74bd21d4caa2310df5c72e580
- SHA1
  
  a65252ea793385d784fd2d0c3a336b52978fceb4
- SHA256
  
  45dae211bbabcd5b2d83dbd64c0e0a0fd09f0eeffb087e8e60720775fb2e68c2
- SHA512
  
  812136bdf1a4e0f24a4e6a4bb116eeb4f0e6e258e63fee66f45de2da26b63fd4d489e99fd23bdd319f65e7ac1f4b61fb3c0b1bb669dc76b57049c1a7a6fc902b
- SSDEEP
  
  768:M+5CfzSjYCr1+bAkpalxUkDUoj/o5R5R:MKCfzuuaFUoDuLR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2