1685a6ef523525264cbcbe311a94f69e74756d76b1e740155bc48f06c68e00cb | Triage

Sharing

General

Target

1685a6ef523525264cbcbe311a94f69e74756d76b1e740155bc48f06c68e00cb
Size

59KB
Sample

221124-affdgshe8s
MD5

07713e380ec9a18c87911bb6610aa1fb
SHA1

fd1f660f1ac7ff7ba8b8cd0ba19cc9acf2a093a8
SHA256

1685a6ef523525264cbcbe311a94f69e74756d76b1e740155bc48f06c68e00cb
SHA512

e95d88a43dc339e2f03c1807fb32bee0baa8f2c879967ac84fd93ff0eb0829789c1d3b779b6ee8c9a39f79b9cde6f238670f4c183c4b57ecf6c4c56704add052
SSDEEP

768:lbPu2jD3GbqtL4yY3cHTYlL2OsebPZByTulCTQh:lbPu4ZtL4D3o8lL2Osebbg

Score

7^/10

Malware Config

Targets

- Target
  
  1685a6ef523525264cbcbe311a94f69e74756d76b1e740155bc48f06c68e00cb
- Size
  
  59KB
- MD5
  
  07713e380ec9a18c87911bb6610aa1fb
- SHA1
  
  fd1f660f1ac7ff7ba8b8cd0ba19cc9acf2a093a8
- SHA256
  
  1685a6ef523525264cbcbe311a94f69e74756d76b1e740155bc48f06c68e00cb
- SHA512
  
  e95d88a43dc339e2f03c1807fb32bee0baa8f2c879967ac84fd93ff0eb0829789c1d3b779b6ee8c9a39f79b9cde6f238670f4c183c4b57ecf6c4c56704add052
- SSDEEP
  
  768:lbPu2jD3GbqtL4yY3cHTYlL2OsebPZByTulCTQh:lbPu4ZtL4D3o8lL2Osebbg
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2