afdfc7eec304ee8588408bbf531373f3a0be0fd5c440eb580df5fd90b9d27bd2 | Triage

Sharing

General

Target

afdfc7eec304ee8588408bbf531373f3a0be0fd5c440eb580df5fd90b9d27bd2N
Size

37KB
Sample

241023-tp31pa1ekk
MD5

5e9efb9929ac59be9bce45c2a2e5fde0
SHA1

c783156f16ece44285f8a91efefd6219d7f5a0ad
SHA256

afdfc7eec304ee8588408bbf531373f3a0be0fd5c440eb580df5fd90b9d27bd2
SHA512

0b372f0ceda55a57e0dae75c480bb96d313895f7e323296614806bf3259e5854241aa996a71109dc006b4f9ffb5842905acce18c92aa436e5f940cc29606469f
SSDEEP

768:irE0cr3xNg6Aut4bE0nvNS5ZHcWh+UNj07wbLwM6jHBB9D3xfjL2x4xC7g8QcrJb:E3WpAjHIHcO+UNS8GBx3xb6x4l8Qc1b

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  afdfc7eec304ee8588408bbf531373f3a0be0fd5c440eb580df5fd90b9d27bd2N
- Size
  
  37KB
- MD5
  
  5e9efb9929ac59be9bce45c2a2e5fde0
- SHA1
  
  c783156f16ece44285f8a91efefd6219d7f5a0ad
- SHA256
  
  afdfc7eec304ee8588408bbf531373f3a0be0fd5c440eb580df5fd90b9d27bd2
- SHA512
  
  0b372f0ceda55a57e0dae75c480bb96d313895f7e323296614806bf3259e5854241aa996a71109dc006b4f9ffb5842905acce18c92aa436e5f940cc29606469f
- SSDEEP
  
  768:irE0cr3xNg6Aut4bE0nvNS5ZHcWh+UNj07wbLwM6jHBB9D3xfjL2x4xC7g8QcrJb:E3WpAjHIHcO+UNS8GBx3xb6x4l8Qc1b
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Impair Defenses: Safe Mode Boot
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Safe Mode Boot

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery