b6f5023063bfd389cefc93d4d9a441630f5ceb57275afd19462c41f48a3decdc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f5023063bfd389cefc93d4d9a441630f5ceb57275afd19462c41f48a3decdc
Size

36KB
Sample

221107-bphqmsdebm
MD5

17cc9d9b2fb122a9d682f425a90d6a10
SHA1

6f5b7c561700cc88bd772351aaed98ad1d67babc
SHA256

b6f5023063bfd389cefc93d4d9a441630f5ceb57275afd19462c41f48a3decdc
SHA512

f8e800186ae0c7082bc6616f3a7271915e155c8c3e4834a8236f86cb74b4789eb39c13a744b18134ded881a832dc638e7480a82e8fe9aec6616c1d6b3459afdd
SSDEEP

768:KK+yhR8y6Hm/F3/De0rqKe09O8HLvkLV:KKlD86zbe6HrkL

Score

7^/10

Malware Config

Targets

- Target
  
  b6f5023063bfd389cefc93d4d9a441630f5ceb57275afd19462c41f48a3decdc
- Size
  
  36KB
- MD5
  
  17cc9d9b2fb122a9d682f425a90d6a10
- SHA1
  
  6f5b7c561700cc88bd772351aaed98ad1d67babc
- SHA256
  
  b6f5023063bfd389cefc93d4d9a441630f5ceb57275afd19462c41f48a3decdc
- SHA512
  
  f8e800186ae0c7082bc6616f3a7271915e155c8c3e4834a8236f86cb74b4789eb39c13a744b18134ded881a832dc638e7480a82e8fe9aec6616c1d6b3459afdd
- SSDEEP
  
  768:KK+yhR8y6Hm/F3/De0rqKe09O8HLvkLV:KKlD86zbe6HrkL
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2