5fc47f28ce7cbcb8d143d40ca16ce66cf1c2485e6952210577b65089b15b83f3 | Triage

Sharing

General

Target

13176cea7b40e46fa45932494886b5f6
Size

112KB
Sample

231230-j3v7wsggdl
MD5

13176cea7b40e46fa45932494886b5f6
SHA1

6295ce4a287e110d34eda671413142bc45cfcdb6
SHA256

5fc47f28ce7cbcb8d143d40ca16ce66cf1c2485e6952210577b65089b15b83f3
SHA512

6056ba0696a6535c0d40902299033ef57755dd917a7a9d0d42a398ac5d4f9ff19aea8730834d91fec134e9ba4c2a8572bcecc83d5723286e67a18164d4d19441
SSDEEP

3072:/19Cc3nckFtUJE4SRoept7Em2F8abPeROXbfZnW2lW9:/1tnckFeSvAFuJROVnWyW9

Score

7^/10

Malware Config

Targets

- Target
  
  13176cea7b40e46fa45932494886b5f6
- Size
  
  112KB
- MD5
  
  13176cea7b40e46fa45932494886b5f6
- SHA1
  
  6295ce4a287e110d34eda671413142bc45cfcdb6
- SHA256
  
  5fc47f28ce7cbcb8d143d40ca16ce66cf1c2485e6952210577b65089b15b83f3
- SHA512
  
  6056ba0696a6535c0d40902299033ef57755dd917a7a9d0d42a398ac5d4f9ff19aea8730834d91fec134e9ba4c2a8572bcecc83d5723286e67a18164d4d19441
- SSDEEP
  
  3072:/19Cc3nckFtUJE4SRoept7Em2F8abPeROXbfZnW2lW9:/1tnckFeSvAFuJROVnWyW9
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2