b64ea3a72f64f1547b0418e29b551091aa07ee94773d7ad58d73a0f6fc0477a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b64ea3a72f64f1547b0418e29b551091aa07ee94773d7ad58d73a0f6fc0477a6
Size

196KB
Sample

240218-d323jsdc61
MD5

97b1389d900f30627532d0b6c14e37b4
SHA1

a39a11020d44b537fd089148914b074a5a4c6912
SHA256

b64ea3a72f64f1547b0418e29b551091aa07ee94773d7ad58d73a0f6fc0477a6
SHA512

850c011c53a0347e636ec3bf0207612924e68a688de13c0828867223e52ae34ed5fdf0bcc6493f8f38d3685515c39d34e5c421cf2e6a50b8bc8a87042e59db95
SSDEEP

6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOI:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXl

Score

7^/10

Malware Config

Targets

- Target
  
  b64ea3a72f64f1547b0418e29b551091aa07ee94773d7ad58d73a0f6fc0477a6
- Size
  
  196KB
- MD5
  
  97b1389d900f30627532d0b6c14e37b4
- SHA1
  
  a39a11020d44b537fd089148914b074a5a4c6912
- SHA256
  
  b64ea3a72f64f1547b0418e29b551091aa07ee94773d7ad58d73a0f6fc0477a6
- SHA512
  
  850c011c53a0347e636ec3bf0207612924e68a688de13c0828867223e52ae34ed5fdf0bcc6493f8f38d3685515c39d34e5c421cf2e6a50b8bc8a87042e59db95
- SSDEEP
  
  6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOI:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXl
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2