71b17a66130cd4cc6e0b0865e66b943321d6e4f3da6d16f12fbc5770c13083b9 | Triage

Sharing

General

Target

71b17a66130cd4cc6e0b0865e66b943321d6e4f3da6d16f12fbc5770c13083b9
Size

201KB
Sample

221125-xs4m6sgh42
MD5

42201011f688c2d2972ef7ee10dec2de
SHA1

679c7cf14a8d1095792eee12e64dd8c11a2534f1
SHA256

71b17a66130cd4cc6e0b0865e66b943321d6e4f3da6d16f12fbc5770c13083b9
SHA512

91d03295529ca1b1c4f085c98c7688e0292acf60023955d512b854f7c0a700d70faa0154057914c0e61d895978367a0663fa5b33fe35d3aa8842a5afacc37f94
SSDEEP

6144:nPpIcn5k9OTtJPzGkvs1C8/ehoraNUXwqK:Ppt5k9OtJPzGY

Score

7^/10

Malware Config

Targets

- Target
  
  71b17a66130cd4cc6e0b0865e66b943321d6e4f3da6d16f12fbc5770c13083b9
- Size
  
  201KB
- MD5
  
  42201011f688c2d2972ef7ee10dec2de
- SHA1
  
  679c7cf14a8d1095792eee12e64dd8c11a2534f1
- SHA256
  
  71b17a66130cd4cc6e0b0865e66b943321d6e4f3da6d16f12fbc5770c13083b9
- SHA512
  
  91d03295529ca1b1c4f085c98c7688e0292acf60023955d512b854f7c0a700d70faa0154057914c0e61d895978367a0663fa5b33fe35d3aa8842a5afacc37f94
- SSDEEP
  
  6144:nPpIcn5k9OTtJPzGkvs1C8/ehoraNUXwqK:Ppt5k9OtJPzGY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2