759271d155300828f936887041c5f7a91f490c4fb603e45b34705d47ce6ae1b4 | Triage

Sharing

General

Target

759271d155300828f936887041c5f7a91f490c4fb603e45b34705d47ce6ae1b4N
Size

50KB
Sample

241014-dttptaxbmh
MD5

52908cc17e4fe3bb780a03deecdb3e30
SHA1

f1f663aad36b2fabc4f457a4fff71368f07a0274
SHA256

759271d155300828f936887041c5f7a91f490c4fb603e45b34705d47ce6ae1b4
SHA512

fbaaa99af83e40ed7c70790304298706ecb6dd295bc391a04f73f343e2c7e23cbd1fad87b67599780a8b91eb70e2ec97a2c70682b141117351bcf97f26e45672
SSDEEP

768:hvQ5qDLHRdw2iPSMEk/6KMvu571xBmPU96cyXH9zlll8555gA:hvQoLHjw2iWPKMvw71/RLyXfA

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  759271d155300828f936887041c5f7a91f490c4fb603e45b34705d47ce6ae1b4N
- Size
  
  50KB
- MD5
  
  52908cc17e4fe3bb780a03deecdb3e30
- SHA1
  
  f1f663aad36b2fabc4f457a4fff71368f07a0274
- SHA256
  
  759271d155300828f936887041c5f7a91f490c4fb603e45b34705d47ce6ae1b4
- SHA512
  
  fbaaa99af83e40ed7c70790304298706ecb6dd295bc391a04f73f343e2c7e23cbd1fad87b67599780a8b91eb70e2ec97a2c70682b141117351bcf97f26e45672
- SSDEEP
  
  768:hvQ5qDLHRdw2iPSMEk/6KMvu571xBmPU96cyXH9zlll8555gA:hvQoLHjw2iWPKMvw71/RLyXfA
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery