a5efcbb554840af4b9ee2b32402a7e264a30186b1e7ddbbbe5d731a22679dd51 | Triage

Sharing

General

Target

a5efcbb554840af4b9ee2b32402a7e264a30186b1e7ddbbbe5d731a22679dd51
Size

20KB
Sample

221123-xl65qaad6x
MD5

4578e1fcfb8bd1ad94cc0e876dc8e2b0
SHA1

bd79116ea7e4db060fbb6e7cfe0ebc6bd862bfa0
SHA256

a5efcbb554840af4b9ee2b32402a7e264a30186b1e7ddbbbe5d731a22679dd51
SHA512

046af4f5cb0508070dc2c0725e3b5159d7c974f418ccf1f9b6414060b6743b27b11d6700b3d1670e461ac137017a436d41662e3d2e434f920b5bda29bc3d989e
SSDEEP

384:Jbldi7mfZsDiM3PfsBhnRGjLbjnsJzlKDfeMa1:Jbldumf41ETxKDfez

Score

7^/10

Malware Config

Targets

- Target
  
  a5efcbb554840af4b9ee2b32402a7e264a30186b1e7ddbbbe5d731a22679dd51
- Size
  
  20KB
- MD5
  
  4578e1fcfb8bd1ad94cc0e876dc8e2b0
- SHA1
  
  bd79116ea7e4db060fbb6e7cfe0ebc6bd862bfa0
- SHA256
  
  a5efcbb554840af4b9ee2b32402a7e264a30186b1e7ddbbbe5d731a22679dd51
- SHA512
  
  046af4f5cb0508070dc2c0725e3b5159d7c974f418ccf1f9b6414060b6743b27b11d6700b3d1670e461ac137017a436d41662e3d2e434f920b5bda29bc3d989e
- SSDEEP
  
  384:Jbldi7mfZsDiM3PfsBhnRGjLbjnsJzlKDfeMa1:Jbldumf41ETxKDfez
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2