0e63895c442e6c972f2f233f1d62acb41a87ea9cb30277027fcc7416233e3a00 | Triage

Sharing

General

Target

0e63895c442e6c972f2f233f1d62acb41a87ea9cb30277027fcc7416233e3a00
Size

104KB
Sample

221021-c3x8xsggek
MD5

57bdd5fa0383dc8ae1fa5fb787727fd0
SHA1

ceeda2032b8a2fd6aa5602ab14c8da0ce8cbe96e
SHA256

0e63895c442e6c972f2f233f1d62acb41a87ea9cb30277027fcc7416233e3a00
SHA512

30f28f28b7b5f3b220286671f18b4a6861175c6a8166ab29d3b1f6eb82e1a73da3104f43dc4326a61a5ef5152b80a44a1379661721c62b22573edc9baa71a881
SSDEEP

1536:m8h+rcMsOKo/9fD87FGfR6TQ2Fcefa3KfybiKqHHgrbt2mQssLN:jgwOKo/tjoFvi3gU8HHgrbt2mNu

Score

7^/10

Malware Config

Targets

- Target
  
  0e63895c442e6c972f2f233f1d62acb41a87ea9cb30277027fcc7416233e3a00
- Size
  
  104KB
- MD5
  
  57bdd5fa0383dc8ae1fa5fb787727fd0
- SHA1
  
  ceeda2032b8a2fd6aa5602ab14c8da0ce8cbe96e
- SHA256
  
  0e63895c442e6c972f2f233f1d62acb41a87ea9cb30277027fcc7416233e3a00
- SHA512
  
  30f28f28b7b5f3b220286671f18b4a6861175c6a8166ab29d3b1f6eb82e1a73da3104f43dc4326a61a5ef5152b80a44a1379661721c62b22573edc9baa71a881
- SSDEEP
  
  1536:m8h+rcMsOKo/9fD87FGfR6TQ2Fcefa3KfybiKqHHgrbt2mQssLN:jgwOKo/tjoFvi3gU8HHgrbt2mNu
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2