ab8d8739752230907944322858d035f77aab944996370e17a525bcb2ebcffc8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab8d8739752230907944322858d035f77aab944996370e17a525bcb2ebcffc8f
Size

84KB
Sample

221124-aaql9sdg95
MD5

26a7dbf066e9c6059cfc21fcd6c9fbe0
SHA1

5a8380223b74ab8f8576ea5adbf06b724a697604
SHA256

ab8d8739752230907944322858d035f77aab944996370e17a525bcb2ebcffc8f
SHA512

6706d7314979da68842d1ef6327b2001bccdcae532840448dab6432ad92be58801e1edfdadc9c44b9523230bcd7315695f831358cbcf97ddcbde32c14d06029c
SSDEEP

768:7zErwr+UcxsC6MGHTymTe8ZFO8gsbHTaq7UACjl1Mq2jPQoaFJE:7Awr+Ucxh61y0e8ZY8PHTnCjwNPQXE

Score

7^/10

Malware Config

Targets

- Target
  
  ab8d8739752230907944322858d035f77aab944996370e17a525bcb2ebcffc8f
- Size
  
  84KB
- MD5
  
  26a7dbf066e9c6059cfc21fcd6c9fbe0
- SHA1
  
  5a8380223b74ab8f8576ea5adbf06b724a697604
- SHA256
  
  ab8d8739752230907944322858d035f77aab944996370e17a525bcb2ebcffc8f
- SHA512
  
  6706d7314979da68842d1ef6327b2001bccdcae532840448dab6432ad92be58801e1edfdadc9c44b9523230bcd7315695f831358cbcf97ddcbde32c14d06029c
- SSDEEP
  
  768:7zErwr+UcxsC6MGHTymTe8ZFO8gsbHTaq7UACjl1Mq2jPQoaFJE:7Awr+Ucxh61y0e8ZY8PHTnCjwNPQXE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2