3445f79f61b5c5ddcdaad162ddbb5b28ce4d21e159d9accd15be8827198defaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3445f79f61b5c5ddcdaad162ddbb5b28ce4d21e159d9accd15be8827198defaf
Size

196KB
Sample

240222-mlds3afg5z
MD5

00c6653eea62c4a08ae410f055135abe
SHA1

1b5e40bff2d7a7e1b61cc70ef9a7724993edd6fa
SHA256

3445f79f61b5c5ddcdaad162ddbb5b28ce4d21e159d9accd15be8827198defaf
SHA512

01f2f4a6958ae8fbd1af9666d1727a7b0f08b91a7e9ad1ca9fcd0cea1625577a3897680d89524f2cb47ef8458cf8f67b99c9e08bfcef1c621b1477128e0404d4
SSDEEP

6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCO7:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXG

Score

7^/10

Malware Config

Targets

- Target
  
  3445f79f61b5c5ddcdaad162ddbb5b28ce4d21e159d9accd15be8827198defaf
- Size
  
  196KB
- MD5
  
  00c6653eea62c4a08ae410f055135abe
- SHA1
  
  1b5e40bff2d7a7e1b61cc70ef9a7724993edd6fa
- SHA256
  
  3445f79f61b5c5ddcdaad162ddbb5b28ce4d21e159d9accd15be8827198defaf
- SHA512
  
  01f2f4a6958ae8fbd1af9666d1727a7b0f08b91a7e9ad1ca9fcd0cea1625577a3897680d89524f2cb47ef8458cf8f67b99c9e08bfcef1c621b1477128e0404d4
- SSDEEP
  
  6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCO7:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXG
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2