c13b977347db3a398588dc278049dc0c41881a877f0ec5eeeefd1e98a8976df1 | Triage

Sharing

General

Target

c13b977347db3a398588dc278049dc0c41881a877f0ec5eeeefd1e98a8976df1
Size

43KB
Sample

221123-31wv7adg53
MD5

16605dbbe10456fdebfd861f0a528990
SHA1

7dcf094125b482cfcbdb1b7997e6d5e06c20633a
SHA256

c13b977347db3a398588dc278049dc0c41881a877f0ec5eeeefd1e98a8976df1
SHA512

0c89b114868f1dad85fbc75ed5b6a77ef4453d7c18e280337c6f13c79e38d1aff773480809677f6a9a2d250f1819ed609d6e0f15cc67e2984a435a0f60964a94
SSDEEP

384:jBp7EtDo+k7qKZwr1D+um22Nw/tXRmmEtrNxvb53y2DCuLfgMBK2VuJYgHMOC8RE:jBb7Do1jDaw/q3Nm2VsMc1MO1

Score

7^/10

Malware Config

Targets

- Target
  
  c13b977347db3a398588dc278049dc0c41881a877f0ec5eeeefd1e98a8976df1
- Size
  
  43KB
- MD5
  
  16605dbbe10456fdebfd861f0a528990
- SHA1
  
  7dcf094125b482cfcbdb1b7997e6d5e06c20633a
- SHA256
  
  c13b977347db3a398588dc278049dc0c41881a877f0ec5eeeefd1e98a8976df1
- SHA512
  
  0c89b114868f1dad85fbc75ed5b6a77ef4453d7c18e280337c6f13c79e38d1aff773480809677f6a9a2d250f1819ed609d6e0f15cc67e2984a435a0f60964a94
- SSDEEP
  
  384:jBp7EtDo+k7qKZwr1D+um22Nw/tXRmmEtrNxvb53y2DCuLfgMBK2VuJYgHMOC8RE:jBb7Do1jDaw/q3Nm2VsMc1MO1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2