f598d79a222b884452e496097388204afe80efbdbc0fb6ebea111d6ed350eee9 | Triage

Sharing

General

Target

f598d79a222b884452e496097388204afe80efbdbc0fb6ebea111d6ed350eee9
Size

115KB
Sample

221012-wjwersedc4
MD5

789e3afd2f3bec70682e077234d55a22
SHA1

a9d2a87c944547754bb1d1b8ada84ba1012cc66c
SHA256

f598d79a222b884452e496097388204afe80efbdbc0fb6ebea111d6ed350eee9
SHA512

44447e559002c9bc1200bbaf0f686b73a0e4f94abfeb4f14711a99e7cfe8c62f556a9bc7ca4a066b3c2df4f05b66d5d720f4cf7affa63fdfd055f4bd46e4ffdb
SSDEEP

3072:1pLzhefTD+7N1DnwdH2DQcuY+fVFzxgH/EEXJe+Hp9:1pLzhETD+7N1DnwdH2DQcuY0ymab

Score

7^/10

Malware Config

Targets

- Target
  
  f598d79a222b884452e496097388204afe80efbdbc0fb6ebea111d6ed350eee9
- Size
  
  115KB
- MD5
  
  789e3afd2f3bec70682e077234d55a22
- SHA1
  
  a9d2a87c944547754bb1d1b8ada84ba1012cc66c
- SHA256
  
  f598d79a222b884452e496097388204afe80efbdbc0fb6ebea111d6ed350eee9
- SHA512
  
  44447e559002c9bc1200bbaf0f686b73a0e4f94abfeb4f14711a99e7cfe8c62f556a9bc7ca4a066b3c2df4f05b66d5d720f4cf7affa63fdfd055f4bd46e4ffdb
- SSDEEP
  
  3072:1pLzhefTD+7N1DnwdH2DQcuY+fVFzxgH/EEXJe+Hp9:1pLzhETD+7N1DnwdH2DQcuY0ymab
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2