c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97df | Triage

Sharing

General

Target

c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97dfN.exe
Size

130KB
Sample

240925-jmqbpstcpl
MD5

e99bd9be832a4f467974459da47099e0
SHA1

fc38974ecc3de8d75bb61eac78c5082ca80bc706
SHA256

c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97df
SHA512

09667aa01933b411c75a205d1783b92ac7e2a4bd3c0394950e34d4306713577c7aed88f88ab8af8a07a44a6c2580b9460c25319e5d58d082ef7f28dc0c2357ee
SSDEEP

3072:kcjjuSrGn/x4+e7gyUvOvR0BZNnvRF0oHoGJW+kXfdPC7ho0rSzJ6V30qD+:kcjjuSrGn/x4+e7PUvOvR0BZNnv30oHI

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97dfN.exe
- Size
  
  130KB
- MD5
  
  e99bd9be832a4f467974459da47099e0
- SHA1
  
  fc38974ecc3de8d75bb61eac78c5082ca80bc706
- SHA256
  
  c1cf11f6a8b726d072216b98d4feb2b12e73b17f2f64253b0ee761b8365f97df
- SHA512
  
  09667aa01933b411c75a205d1783b92ac7e2a4bd3c0394950e34d4306713577c7aed88f88ab8af8a07a44a6c2580b9460c25319e5d58d082ef7f28dc0c2357ee
- SSDEEP
  
  3072:kcjjuSrGn/x4+e7gyUvOvR0BZNnvRF0oHoGJW+kXfdPC7ho0rSzJ6V30qD+:kcjjuSrGn/x4+e7PUvOvR0BZNnv30oHI
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2