b138bc803da25e3ce888cd6e4589bdbd36d9b17326aaabd1c2c4df6fcba350b4 | Triage

Sharing

General

Target

1197946b70452c1701104fe7b8e5eb2a
Size

115KB
Sample

231224-zgzaesdfc9
MD5

1197946b70452c1701104fe7b8e5eb2a
SHA1

226f0c33dcfb540d26e2595ed7da1525c08117c2
SHA256

b138bc803da25e3ce888cd6e4589bdbd36d9b17326aaabd1c2c4df6fcba350b4
SHA512

0d74e099a782cd42fd0d4aff93b67a9479eba3349f44657ec9ebdf157e5b02d7e55b2a865aa7d26155aa1713d84b4687ff4a9fd845b8a29bf4aea5d4baa41ef5
SSDEEP

3072:YmpEp9xUWu1gGjXr2vwvEbMps2i/XHCoX:YmpPTj7QIpsPV

Score

7^/10

Malware Config

Targets

- Target
  
  1197946b70452c1701104fe7b8e5eb2a
- Size
  
  115KB
- MD5
  
  1197946b70452c1701104fe7b8e5eb2a
- SHA1
  
  226f0c33dcfb540d26e2595ed7da1525c08117c2
- SHA256
  
  b138bc803da25e3ce888cd6e4589bdbd36d9b17326aaabd1c2c4df6fcba350b4
- SHA512
  
  0d74e099a782cd42fd0d4aff93b67a9479eba3349f44657ec9ebdf157e5b02d7e55b2a865aa7d26155aa1713d84b4687ff4a9fd845b8a29bf4aea5d4baa41ef5
- SSDEEP
  
  3072:YmpEp9xUWu1gGjXr2vwvEbMps2i/XHCoX:YmpPTj7QIpsPV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2