ea444111681e1c26060cd430df7421151d95f3b9574fab6af9291d96d92202a4 | Triage

Sharing

General

Target

ea444111681e1c26060cd430df7421151d95f3b9574fab6af9291d96d92202a4
Size

840KB
Sample

221123-s1f5macg23
MD5

be9fadf97f55d0f5284d9247bf742066
SHA1

204be58b11e6a8460024b164442b1ddd46983ff6
SHA256

ea444111681e1c26060cd430df7421151d95f3b9574fab6af9291d96d92202a4
SHA512

4cbad47d8f8fa1f7a38eacd05452644cc46d72c16e13f4d922dbc785bdd0a3d42f334bc29a54ff5f49a424355393f89d9c497f0d58d0c3f15d836a1931768462
SSDEEP

24576:rBUtwIZfSB0NIFcOZ3DD4VrqlYB5gQTcK:+GcjlqlE5gQTcK

Score

7^/10

Malware Config

Targets

- Target
  
  ea444111681e1c26060cd430df7421151d95f3b9574fab6af9291d96d92202a4
- Size
  
  840KB
- MD5
  
  be9fadf97f55d0f5284d9247bf742066
- SHA1
  
  204be58b11e6a8460024b164442b1ddd46983ff6
- SHA256
  
  ea444111681e1c26060cd430df7421151d95f3b9574fab6af9291d96d92202a4
- SHA512
  
  4cbad47d8f8fa1f7a38eacd05452644cc46d72c16e13f4d922dbc785bdd0a3d42f334bc29a54ff5f49a424355393f89d9c497f0d58d0c3f15d836a1931768462
- SSDEEP
  
  24576:rBUtwIZfSB0NIFcOZ3DD4VrqlYB5gQTcK:+GcjlqlE5gQTcK
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2