5aa3dc2147d6c35ff22b56fa74dd97089a74151e198b5c71200849be2d64378d | Triage

Sharing

General

Target

5aa3dc2147d6c35ff22b56fa74dd97089a74151e198b5c71200849be2d64378d
Size

177KB
Sample

221106-fg198sffdp
MD5

3b8c8f1085a79b00ddc946df241e50db
SHA1

d072e577aaf8e906578827f76eaceeb7898aebb1
SHA256

5aa3dc2147d6c35ff22b56fa74dd97089a74151e198b5c71200849be2d64378d
SHA512

a79654f764ddc37b17a860e80426f2696c06da5d39aebeb32ac8b21e34a27d2d831a933b3428b4ad23730016ecd4a85051994a5046a4083e57fa71de01ae7205
SSDEEP

3072:8onLoLYT67BJjrPb468PRs6VAqFa6Z/jZir5g2N8yGDp+mSX:PnLo8W7PPb4pdVAAjI+t

Score

7^/10

Malware Config

Targets

- Target
  
  5aa3dc2147d6c35ff22b56fa74dd97089a74151e198b5c71200849be2d64378d
- Size
  
  177KB
- MD5
  
  3b8c8f1085a79b00ddc946df241e50db
- SHA1
  
  d072e577aaf8e906578827f76eaceeb7898aebb1
- SHA256
  
  5aa3dc2147d6c35ff22b56fa74dd97089a74151e198b5c71200849be2d64378d
- SHA512
  
  a79654f764ddc37b17a860e80426f2696c06da5d39aebeb32ac8b21e34a27d2d831a933b3428b4ad23730016ecd4a85051994a5046a4083e57fa71de01ae7205
- SSDEEP
  
  3072:8onLoLYT67BJjrPb468PRs6VAqFa6Z/jZir5g2N8yGDp+mSX:PnLo8W7PPb4pdVAAjI+t
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2