49c45a82644e7e8797494be3e3f567960885b5aedb0dec60d0f8ae3f320abdc4 | Triage

Sharing

General

Target

49c45a82644e7e8797494be3e3f567960885b5aedb0dec60d0f8ae3f320abdc4
Size

64KB
Sample

221128-fpw1gscd2z
MD5

9dd5ecd5b528277de016e19c2bc28a23
SHA1

15d834c9c4ecd4735281d77e4e4640cabd3e7066
SHA256

49c45a82644e7e8797494be3e3f567960885b5aedb0dec60d0f8ae3f320abdc4
SHA512

a3becd6e7cd0834ee3763983d49e6c538af4949401e25ed70629d8833813a09e908ede633bc5dd1a3fd154e472ab85f7572336293cb0735764380c600d5dc8a1
SSDEEP

1536:xET64WKch3dQzOwtwSI3yHBUJu5OXIvzpjIp/P:xq64Wx3dmqSSyHBknGzpjA/P

Score

7^/10

Malware Config

Targets

- Target
  
  49c45a82644e7e8797494be3e3f567960885b5aedb0dec60d0f8ae3f320abdc4
- Size
  
  64KB
- MD5
  
  9dd5ecd5b528277de016e19c2bc28a23
- SHA1
  
  15d834c9c4ecd4735281d77e4e4640cabd3e7066
- SHA256
  
  49c45a82644e7e8797494be3e3f567960885b5aedb0dec60d0f8ae3f320abdc4
- SHA512
  
  a3becd6e7cd0834ee3763983d49e6c538af4949401e25ed70629d8833813a09e908ede633bc5dd1a3fd154e472ab85f7572336293cb0735764380c600d5dc8a1
- SSDEEP
  
  1536:xET64WKch3dQzOwtwSI3yHBUJu5OXIvzpjIp/P:xq64Wx3dmqSSyHBknGzpjA/P
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2