4524c0797edf095a4902fb1b278b9846ec012d54bd89939870e75ea94a51d4c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4524c0797edf095a4902fb1b278b9846ec012d54bd89939870e75ea94a51d4c2
Size

196KB
Sample

240201-nnj9asebhm
MD5

e8c26eb033f6a36454f4fff82bee746d
SHA1

fbbd2652edb6e416f7d403f47ef02ee828bc4a43
SHA256

4524c0797edf095a4902fb1b278b9846ec012d54bd89939870e75ea94a51d4c2
SHA512

c9abf35c2c9d09ab0ac9d3dff76ad1981d35a4bef00053511c058d4d890e7162ed4e5d692cac913314f1c250809c98f08b38044d2756b6f953cdd55dd4377f4a
SSDEEP

6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOq:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXT

Score

7^/10

Malware Config

Targets

- Target
  
  4524c0797edf095a4902fb1b278b9846ec012d54bd89939870e75ea94a51d4c2
- Size
  
  196KB
- MD5
  
  e8c26eb033f6a36454f4fff82bee746d
- SHA1
  
  fbbd2652edb6e416f7d403f47ef02ee828bc4a43
- SHA256
  
  4524c0797edf095a4902fb1b278b9846ec012d54bd89939870e75ea94a51d4c2
- SHA512
  
  c9abf35c2c9d09ab0ac9d3dff76ad1981d35a4bef00053511c058d4d890e7162ed4e5d692cac913314f1c250809c98f08b38044d2756b6f953cdd55dd4377f4a
- SSDEEP
  
  6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOq:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXT
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2