8fc0b8cbc3780ccaab973a3aca9cd4d1cf296aa524d43f625931d76a4d7189fb | Triage

Sharing

General

Target

658d9ea4093e492a0f1a8cc6e054e65d2ea30f22fd179b1e1ca58c17618690e9.zip
Size

197KB
Sample

231119-zjdfqsbd52
MD5

59da8728a41282a52e728f495d9e249f
SHA1

218ea19f5e11951b2c87e20a4b92ed1a739955d8
SHA256

8fc0b8cbc3780ccaab973a3aca9cd4d1cf296aa524d43f625931d76a4d7189fb
SHA512

d53df4ff8d34d778bee8bcb4650ace959a9ffcb5810961ab1cfc2396bd68ed627e949a671db8ef12bad30a7990a3937e92225a90857adf6386f8670b04d6cd83
SSDEEP

6144:pTHtI1N8GrJ9tBl4BN1Z9YXZtpoTESDSdtZBY77Hg:pTHtIrRF343JaZz0Eyktz47A

Score

7^/10

Malware Config

Targets

- Target
  
  658d9ea4093e492a0f1a8cc6e054e65d2ea30f22fd179b1e1ca58c17618690e9.exe
- Size
  
  345KB
- MD5
  
  93ebac23d004441f2792c36b731845c4
- SHA1
  
  1fa7dd46ebea5b4c476d97d5126f021dcd9ea69f
- SHA256
  
  658d9ea4093e492a0f1a8cc6e054e65d2ea30f22fd179b1e1ca58c17618690e9
- SHA512
  
  be7711557dc0cf6cc3d5dfa3e478f8231f7a76c8e1f602fecd1f3f8a04ad024177859a7e47cba245c38adfc966c6d5e7f95104b076a02f5c147d1dcbd56ee0f1
- SSDEEP
  
  6144:gNZ8nMtxUX84p2nxG0FGebTmCuNQ8g1WKLe:oaMvUX87xr9bKQ/1nS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2