aeb80b087e44269cf58b4671d0eb6db0d90738f7ab1d706b37855d87be2c1768 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeb80b087e44269cf58b4671d0eb6db0d90738f7ab1d706b37855d87be2c1768
Size

64KB
Sample

221203-xyftasgf27
MD5

cd63c2c80dd313e15b82fe341cccae05
SHA1

64fe56b5b359d225d24416c047f6d6c3bacbd798
SHA256

aeb80b087e44269cf58b4671d0eb6db0d90738f7ab1d706b37855d87be2c1768
SHA512

13e99f32a81b4cb903631640e21c1dd5d8a3ae37f780aeb9600f1db4e06dbe53f0098b2421d7634dad3b21c7d29a8fee7699277cd38418c8a9566a5a1320ad67
SSDEEP

768:dBEpOBszmQ0MT5v1xI32yn+NaVVIOEWvwxBElA7V+i:4gBQmQ0MT5Q32ynk0VIOhvwwlGV+i

Score

7^/10

Malware Config

Targets

- Target
  
  aeb80b087e44269cf58b4671d0eb6db0d90738f7ab1d706b37855d87be2c1768
- Size
  
  64KB
- MD5
  
  cd63c2c80dd313e15b82fe341cccae05
- SHA1
  
  64fe56b5b359d225d24416c047f6d6c3bacbd798
- SHA256
  
  aeb80b087e44269cf58b4671d0eb6db0d90738f7ab1d706b37855d87be2c1768
- SHA512
  
  13e99f32a81b4cb903631640e21c1dd5d8a3ae37f780aeb9600f1db4e06dbe53f0098b2421d7634dad3b21c7d29a8fee7699277cd38418c8a9566a5a1320ad67
- SSDEEP
  
  768:dBEpOBszmQ0MT5v1xI32yn+NaVVIOEWvwxBElA7V+i:4gBQmQ0MT5Q32ynk0VIOhvwwlGV+i
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2