a618e4ccdffe5edbea229cc87855fad3329e8d43a45704b41bcd0ca78f40d3e8 | Triage

Sharing

General

Target

a618e4ccdffe5edbea229cc87855fad3329e8d43a45704b41bcd0ca78f40d3e8
Size

115KB
Sample

221028-whqswshbd3
MD5

0aadb508a1d9c3b27ce611f3452fef28
SHA1

f29ac68118539edcf65d6f76d0d522823791d8f6
SHA256

a618e4ccdffe5edbea229cc87855fad3329e8d43a45704b41bcd0ca78f40d3e8
SHA512

2fefc13f34752fb8f572da449b45ff7665fa8d45e767986275a6e21712758459534c6ad7831d189126a96a2851ece4cfef8b1a5663b887e8c0c998347bd4980d
SSDEEP

3072:1pLzhefTD+7N1DnwdH2DQcuY+fVFzxgH/EEXJe+H79:1pLzhETD+7N1DnwdH2DQcuY0ymaR

Score

7^/10

Malware Config

Targets

- Target
  
  a618e4ccdffe5edbea229cc87855fad3329e8d43a45704b41bcd0ca78f40d3e8
- Size
  
  115KB
- MD5
  
  0aadb508a1d9c3b27ce611f3452fef28
- SHA1
  
  f29ac68118539edcf65d6f76d0d522823791d8f6
- SHA256
  
  a618e4ccdffe5edbea229cc87855fad3329e8d43a45704b41bcd0ca78f40d3e8
- SHA512
  
  2fefc13f34752fb8f572da449b45ff7665fa8d45e767986275a6e21712758459534c6ad7831d189126a96a2851ece4cfef8b1a5663b887e8c0c998347bd4980d
- SSDEEP
  
  3072:1pLzhefTD+7N1DnwdH2DQcuY+fVFzxgH/EEXJe+H79:1pLzhETD+7N1DnwdH2DQcuY0ymaR
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2