3d8981dd8ae40beb01b35e1892c4f26b5942bbbb1a555897b37bc4dd97ce6efd | Triage

Sharing

General

Target

3d8981dd8ae40beb01b35e1892c4f26b5942bbbb1a555897b37bc4dd97ce6efd
Size

84KB
Sample

221123-vh6nnsca7y
MD5

43ad81b77af31daa00b687a2b2c77090
SHA1

96dfc2cfaa79d8221fec67ee6e2f8cd119fc987a
SHA256

3d8981dd8ae40beb01b35e1892c4f26b5942bbbb1a555897b37bc4dd97ce6efd
SHA512

0f5ed0a123d82a1ca2552362c9b663383c2c690bd0d1bef48b2ed88153324742351234aff36b666f5f9b2fbbf48c4a4e41f08b9461fd6b0271527d99df863998
SSDEEP

768:Ahzprwr+UcxsC6MGVTROCV8ZFx81N9yyqm4IYoJpjX1Mq2jPQoaFj:0Jwr+Ucxh6HRFV8Z/8f9yjipjaNPQ9

Score

7^/10

Malware Config

Targets

- Target
  
  3d8981dd8ae40beb01b35e1892c4f26b5942bbbb1a555897b37bc4dd97ce6efd
- Size
  
  84KB
- MD5
  
  43ad81b77af31daa00b687a2b2c77090
- SHA1
  
  96dfc2cfaa79d8221fec67ee6e2f8cd119fc987a
- SHA256
  
  3d8981dd8ae40beb01b35e1892c4f26b5942bbbb1a555897b37bc4dd97ce6efd
- SHA512
  
  0f5ed0a123d82a1ca2552362c9b663383c2c690bd0d1bef48b2ed88153324742351234aff36b666f5f9b2fbbf48c4a4e41f08b9461fd6b0271527d99df863998
- SSDEEP
  
  768:Ahzprwr+UcxsC6MGVTROCV8ZFx81N9yyqm4IYoJpjX1Mq2jPQoaFj:0Jwr+Ucxh6HRFV8Z/8f9yjipjaNPQ9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2