24cfac1cbcbcfbbe81dc9707ece3316c818203310a9c71776be0d3f127dc3f3f | Triage

Sharing

General

Target

24cfac1cbcbcfbbe81dc9707ece3316c818203310a9c71776be0d3f127dc3f3f
Size

127KB
Sample

221107-zdkmvsagbn
MD5

02c6a059c7fbc4c5420553912aeb4750
SHA1

2127c6cb6e902b4a05c3b5aafd7d0decce90edfe
SHA256

24cfac1cbcbcfbbe81dc9707ece3316c818203310a9c71776be0d3f127dc3f3f
SHA512

5c1e3b61957f60b6647f8838ecfb3e3837ff007f796f910c7e904d958c461a9d7f5bc6f18227abb61dbf944900ed25485f47aa5cb29d7300ad67dd57efe135f6
SSDEEP

1536:mutTJ9L81T9ihDNetNmwdRP2V9uvoFEotqYrUvc9X0HbX8FIkqf:mudQERKPk8oFEotqYrCc9X0HKNO

Score

7^/10

Malware Config

Targets

- Target
  
  24cfac1cbcbcfbbe81dc9707ece3316c818203310a9c71776be0d3f127dc3f3f
- Size
  
  127KB
- MD5
  
  02c6a059c7fbc4c5420553912aeb4750
- SHA1
  
  2127c6cb6e902b4a05c3b5aafd7d0decce90edfe
- SHA256
  
  24cfac1cbcbcfbbe81dc9707ece3316c818203310a9c71776be0d3f127dc3f3f
- SHA512
  
  5c1e3b61957f60b6647f8838ecfb3e3837ff007f796f910c7e904d958c461a9d7f5bc6f18227abb61dbf944900ed25485f47aa5cb29d7300ad67dd57efe135f6
- SSDEEP
  
  1536:mutTJ9L81T9ihDNetNmwdRP2V9uvoFEotqYrUvc9X0HbX8FIkqf:mudQERKPk8oFEotqYrCc9X0HKNO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2