e9b6156ffd73515cdb2817e4a89fced55fd399579c1d1f962a02d64caac74fc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9b6156ffd73515cdb2817e4a89fced55fd399579c1d1f962a02d64caac74fc9
Size

128KB
Sample

221123-3zewaadf54
MD5

2f9f6a53c4123b7743496d4705f1f2df
SHA1

9d82079b9e1848b8df53105f15188ac958f55707
SHA256

e9b6156ffd73515cdb2817e4a89fced55fd399579c1d1f962a02d64caac74fc9
SHA512

5ac08af27b3c85605f06218391325e74dfccd0c64159477aeb75b1f46e4fecd017d7c1f72a362201b59dabbf421bb22723884cbb4cce855b6d9655e169c6540e
SSDEEP

768:kDbM0G1aIeMT2eaxg83PuUeqTaeBBW+9BkhtLxzjroQTo2jzr/fDHLVQIAxQQ:knMDaacg8GtyTlML1VfjLHlAT

Score

7^/10

Malware Config

Targets

- Target
  
  e9b6156ffd73515cdb2817e4a89fced55fd399579c1d1f962a02d64caac74fc9
- Size
  
  128KB
- MD5
  
  2f9f6a53c4123b7743496d4705f1f2df
- SHA1
  
  9d82079b9e1848b8df53105f15188ac958f55707
- SHA256
  
  e9b6156ffd73515cdb2817e4a89fced55fd399579c1d1f962a02d64caac74fc9
- SHA512
  
  5ac08af27b3c85605f06218391325e74dfccd0c64159477aeb75b1f46e4fecd017d7c1f72a362201b59dabbf421bb22723884cbb4cce855b6d9655e169c6540e
- SSDEEP
  
  768:kDbM0G1aIeMT2eaxg83PuUeqTaeBBW+9BkhtLxzjroQTo2jzr/fDHLVQIAxQQ:knMDaacg8GtyTlML1VfjLHlAT
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2