f7917b89aa12f4ca825d85e4ac7c3a4992c879b5157c32d9bdbe862e0d4b6e61 | Triage

Sharing

General

Target

f7917b89aa12f4ca825d85e4ac7c3a4992c879b5157c32d9bdbe862e0d4b6e61
Size

257KB
Sample

240219-xhlplsbe97
MD5

77a2c14f3cbbf8de36d71ec71a2b5db9
SHA1

271fc7d87a641d20fd062506f1b0dfe66157bdea
SHA256

f7917b89aa12f4ca825d85e4ac7c3a4992c879b5157c32d9bdbe862e0d4b6e61
SHA512

bb04ae4861b2974ee5ca10f2a01d299acfe161f38f4be7ac8ef5ca03525ea7cc581f4f812b077abcf7f7592a187ead487cbb6723b050469cf9755590ac8dd92a
SSDEEP

3072:r0EVXyKVxntSV+P94EhS+43bh78L+ps1XxMu/3wLaTm+tDLgaRyZY+6W/cHQX5dy:FiSfiXLh7vy15waTJLQq+6W/cH6N

Score

7^/10

Malware Config

Targets

- Target
  
  f7917b89aa12f4ca825d85e4ac7c3a4992c879b5157c32d9bdbe862e0d4b6e61
- Size
  
  257KB
- MD5
  
  77a2c14f3cbbf8de36d71ec71a2b5db9
- SHA1
  
  271fc7d87a641d20fd062506f1b0dfe66157bdea
- SHA256
  
  f7917b89aa12f4ca825d85e4ac7c3a4992c879b5157c32d9bdbe862e0d4b6e61
- SHA512
  
  bb04ae4861b2974ee5ca10f2a01d299acfe161f38f4be7ac8ef5ca03525ea7cc581f4f812b077abcf7f7592a187ead487cbb6723b050469cf9755590ac8dd92a
- SSDEEP
  
  3072:r0EVXyKVxntSV+P94EhS+43bh78L+ps1XxMu/3wLaTm+tDLgaRyZY+6W/cHQX5dy:FiSfiXLh7vy15waTJLQq+6W/cH6N
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2