daf12ebc2f9fac7e8c02a38549634948cf8e0c20d5da789bb81889f06f7938a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daf12ebc2f9fac7e8c02a38549634948cf8e0c20d5da789bb81889f06f7938a7
Size

206KB
Sample

221030-n3p34aaehm
MD5

93edb5c6cb7b831076a65bc4d65388dd
SHA1

4e30a372673845699dc624a23e4e1e5a94bd6894
SHA256

daf12ebc2f9fac7e8c02a38549634948cf8e0c20d5da789bb81889f06f7938a7
SHA512

0a0b26ecb6425550693c4cc0e7e16eda62b34b13114567a6d2a7d56a178f51b81742cae140e183cc47250f8d703e8e5bfef002752ac316b73198f1b4ad4bc7f2
SSDEEP

3072:k0t3PPdj6SY0prnpQ0Ahvl9e2Oc0+rb3WdK1KLxyNeEvYS9:J31Y0nQ00tM2Oc5PWdK1KQeEvY

Score

7^/10

Malware Config

Targets

- Target
  
  daf12ebc2f9fac7e8c02a38549634948cf8e0c20d5da789bb81889f06f7938a7
- Size
  
  206KB
- MD5
  
  93edb5c6cb7b831076a65bc4d65388dd
- SHA1
  
  4e30a372673845699dc624a23e4e1e5a94bd6894
- SHA256
  
  daf12ebc2f9fac7e8c02a38549634948cf8e0c20d5da789bb81889f06f7938a7
- SHA512
  
  0a0b26ecb6425550693c4cc0e7e16eda62b34b13114567a6d2a7d56a178f51b81742cae140e183cc47250f8d703e8e5bfef002752ac316b73198f1b4ad4bc7f2
- SSDEEP
  
  3072:k0t3PPdj6SY0prnpQ0Ahvl9e2Oc0+rb3WdK1KLxyNeEvYS9:J31Y0nQ00tM2Oc5PWdK1KQeEvY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2