1b46dd2363eaf3bb5430e4d0e9c3d0db0a3d0db4dcf1962270bfa7a768f74d0c | Triage

Sharing

General

Target

111a8f4dca3c4f9e23c72d10cce1a072
Size

37KB
Sample

231225-j2gywaabg9
MD5

111a8f4dca3c4f9e23c72d10cce1a072
SHA1

e9d0c1c19f5d2aa59b04fbfdc220dff428e450f7
SHA256

1b46dd2363eaf3bb5430e4d0e9c3d0db0a3d0db4dcf1962270bfa7a768f74d0c
SHA512

7099a2ba2d7b53f22801e1c3fd66b71e14c9025a86da5d9004a19feff7b32d582de997f2efa93b11f14bd7231e343ba336ee3abde7151cbb944a606450db842a
SSDEEP

768:28kr2D6AKlLO+SNhBgCHDck4MV0ggv8KoETBB9D3xvjHhx4eC7Xj8Qc1ey:5/6A0q5HDR4oWBx3xrBx41z8Qcky

Score

7^/10

Malware Config

Targets

- Target
  
  111a8f4dca3c4f9e23c72d10cce1a072
- Size
  
  37KB
- MD5
  
  111a8f4dca3c4f9e23c72d10cce1a072
- SHA1
  
  e9d0c1c19f5d2aa59b04fbfdc220dff428e450f7
- SHA256
  
  1b46dd2363eaf3bb5430e4d0e9c3d0db0a3d0db4dcf1962270bfa7a768f74d0c
- SHA512
  
  7099a2ba2d7b53f22801e1c3fd66b71e14c9025a86da5d9004a19feff7b32d582de997f2efa93b11f14bd7231e343ba336ee3abde7151cbb944a606450db842a
- SSDEEP
  
  768:28kr2D6AKlLO+SNhBgCHDck4MV0ggv8KoETBB9D3xvjHhx4eC7Xj8Qc1ey:5/6A0q5HDR4oWBx3xrBx41z8Qcky
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2