e692f4a89411cc7373662831a786875c6081f0a5f2213c3f5c725644c46d4462 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

221f56f881302e4407e1bd3cdb9c7042
Size

112KB
Sample

231231-a249qshbhm
MD5

221f56f881302e4407e1bd3cdb9c7042
SHA1

b593bcabf53231ffa0c00d196c519fad99e690fc
SHA256

e692f4a89411cc7373662831a786875c6081f0a5f2213c3f5c725644c46d4462
SHA512

bd23b9d9f70d55da69e521da658b779d8007a8bf0f7a4c1f41d2215ba5404007f8f5846eaea7f738f62ddded132679748c2e4543b7b688d4a20900b1dd5bddfe
SSDEEP

3072:t07l+ctDdbyS6nNOpRUp9xdHBTP1dxt6CtJnndTkzGf+R2In8fprhgce+MFIq:W7l+ct5UOpRUp9HdxQCtlZkzG2RH8BaN

Score

7^/10

Malware Config

Targets

- Target
  
  221f56f881302e4407e1bd3cdb9c7042
- Size
  
  112KB
- MD5
  
  221f56f881302e4407e1bd3cdb9c7042
- SHA1
  
  b593bcabf53231ffa0c00d196c519fad99e690fc
- SHA256
  
  e692f4a89411cc7373662831a786875c6081f0a5f2213c3f5c725644c46d4462
- SHA512
  
  bd23b9d9f70d55da69e521da658b779d8007a8bf0f7a4c1f41d2215ba5404007f8f5846eaea7f738f62ddded132679748c2e4543b7b688d4a20900b1dd5bddfe
- SSDEEP
  
  3072:t07l+ctDdbyS6nNOpRUp9xdHBTP1dxt6CtJnndTkzGf+R2In8fprhgce+MFIq:W7l+ct5UOpRUp9HdxQCtlZkzG2RH8BaN
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2