029f89a62f5c8352b9c14e3b3ddf23328af297890597a1322377a65fd8c70b86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

029f89a62f5c8352b9c14e3b3ddf23328af297890597a1322377a65fd8c70b86
Size

96KB
Sample

221020-camxgshdh3
MD5

56a28e8307162acdc024d4e1a1fec400
SHA1

1c03179483df27bde8c764c6fd54049d2e1285db
SHA256

029f89a62f5c8352b9c14e3b3ddf23328af297890597a1322377a65fd8c70b86
SHA512

9c1a30c6cef167897f889fd3a37e5e3a3a20b307ee1723c334e89bda0e9d2a247c5bcc4347fc32cc16bb54fb4dfe7259899471767fc6e044dcc3d10f5f8b0a7c
SSDEEP

1536:1g33pQxJgUrtT6E4uBzox94L/3hCNApmGE9h1:1gnUtWEFoxezxCNec

Score

7^/10

Malware Config

Targets

- Target
  
  029f89a62f5c8352b9c14e3b3ddf23328af297890597a1322377a65fd8c70b86
- Size
  
  96KB
- MD5
  
  56a28e8307162acdc024d4e1a1fec400
- SHA1
  
  1c03179483df27bde8c764c6fd54049d2e1285db
- SHA256
  
  029f89a62f5c8352b9c14e3b3ddf23328af297890597a1322377a65fd8c70b86
- SHA512
  
  9c1a30c6cef167897f889fd3a37e5e3a3a20b307ee1723c334e89bda0e9d2a247c5bcc4347fc32cc16bb54fb4dfe7259899471767fc6e044dcc3d10f5f8b0a7c
- SSDEEP
  
  1536:1g33pQxJgUrtT6E4uBzox94L/3hCNApmGE9h1:1gnUtWEFoxezxCNec
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2