bd6ec969510b96709d5bfad53241d45ee2216c413a06f8e44f4966a08c8d40f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd6ec969510b96709d5bfad53241d45ee2216c413a06f8e44f4966a08c8d40f7
Size

172KB
Sample

221012-v4rrmsdfan
MD5

68f8d4337197f992612f8ae258707c60
SHA1

7a7499ff83d10a07e3264eb3846072bb259b4ac9
SHA256

bd6ec969510b96709d5bfad53241d45ee2216c413a06f8e44f4966a08c8d40f7
SHA512

92ec8fb61b94dd125246798ca48dcfae8ee0533ba2d737306501e7de4e3de5d7f49327488c2860ada9e9fa733b69a539a1887946c3bf87344767b81419c66e0e
SSDEEP

1536:gjQPJYqUmnuWiBr3OGx94aA0xlpFdRF0tctlxsxIZk9JqHWQT:+snT2lDdRF0tw7TI4

Score

7^/10

Malware Config

Targets

- Target
  
  bd6ec969510b96709d5bfad53241d45ee2216c413a06f8e44f4966a08c8d40f7
- Size
  
  172KB
- MD5
  
  68f8d4337197f992612f8ae258707c60
- SHA1
  
  7a7499ff83d10a07e3264eb3846072bb259b4ac9
- SHA256
  
  bd6ec969510b96709d5bfad53241d45ee2216c413a06f8e44f4966a08c8d40f7
- SHA512
  
  92ec8fb61b94dd125246798ca48dcfae8ee0533ba2d737306501e7de4e3de5d7f49327488c2860ada9e9fa733b69a539a1887946c3bf87344767b81419c66e0e
- SSDEEP
  
  1536:gjQPJYqUmnuWiBr3OGx94aA0xlpFdRF0tctlxsxIZk9JqHWQT:+snT2lDdRF0tw7TI4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2