c25df7313d9efda49d309a402795e0ade5de5f7384adc1f055d33035f23b55fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01c73547ebe293dedbb29833e465ba83
Size

36KB
Sample

231224-r2dkfsggej
MD5

01c73547ebe293dedbb29833e465ba83
SHA1

8b5007670a681e5a34a906861cf8ab025349e628
SHA256

c25df7313d9efda49d309a402795e0ade5de5f7384adc1f055d33035f23b55fb
SHA512

7058db3208b288e01306adda6694ffa97f854fb32cf0f399d910250f4cba1bcd71fcd43a75df9c9e21f2a882f197c55c2dd6adccbfeddcd300803e55806d93fc
SSDEEP

384:IUeXlGKamcajllu1rwqHg1ycZSZm1XMvmQz2Uob6ih1H/iTWUi1AbaAHPkIlo5CD:QemcMi5c0EQcb6iDiCn1basI2Ca

Score

7^/10

Malware Config

Targets

- Target
  
  01c73547ebe293dedbb29833e465ba83
- Size
  
  36KB
- MD5
  
  01c73547ebe293dedbb29833e465ba83
- SHA1
  
  8b5007670a681e5a34a906861cf8ab025349e628
- SHA256
  
  c25df7313d9efda49d309a402795e0ade5de5f7384adc1f055d33035f23b55fb
- SHA512
  
  7058db3208b288e01306adda6694ffa97f854fb32cf0f399d910250f4cba1bcd71fcd43a75df9c9e21f2a882f197c55c2dd6adccbfeddcd300803e55806d93fc
- SSDEEP
  
  384:IUeXlGKamcajllu1rwqHg1ycZSZm1XMvmQz2Uob6ih1H/iTWUi1AbaAHPkIlo5CD:QemcMi5c0EQcb6iDiCn1basI2Ca
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2