a01d6d3e03e2a8d9659528e8d1c53761ced2b7d4482abefc538e51682105e6cc | Triage

Sharing

General

Target

a01d6d3e03e2a8d9659528e8d1c53761ced2b7d4482abefc538e51682105e6cc
Size

213KB
Sample

221203-kmrp7scd4v
MD5

e395a4334a1b6b46cb43c19d0e0ef41a
SHA1

0edd21e0de92c4a827cd988fc8a77d61d780a883
SHA256

a01d6d3e03e2a8d9659528e8d1c53761ced2b7d4482abefc538e51682105e6cc
SHA512

1a45f6cfd5ec1d9149684e5be936c8691c7360d27227c320d3360ab80b1473103bf917639bfd43c476b443ef5df2f489dfe103f3f39d86581d4c56ce8f6bc0d9
SSDEEP

3072:WGf6viAIxc9LNyRulW1fyNi2i9sn8SK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1KsvH0q907Q7DF43jF

Score

7^/10

Malware Config

Targets

- Target
  
  a01d6d3e03e2a8d9659528e8d1c53761ced2b7d4482abefc538e51682105e6cc
- Size
  
  213KB
- MD5
  
  e395a4334a1b6b46cb43c19d0e0ef41a
- SHA1
  
  0edd21e0de92c4a827cd988fc8a77d61d780a883
- SHA256
  
  a01d6d3e03e2a8d9659528e8d1c53761ced2b7d4482abefc538e51682105e6cc
- SHA512
  
  1a45f6cfd5ec1d9149684e5be936c8691c7360d27227c320d3360ab80b1473103bf917639bfd43c476b443ef5df2f489dfe103f3f39d86581d4c56ce8f6bc0d9
- SSDEEP
  
  3072:WGf6viAIxc9LNyRulW1fyNi2i9sn8SK0qt94kJ+7fno7DFkMO3jF9G:WGuCxciuW1KsvH0q907Q7DF43jF
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2