71461e4dd644e119f57aece7d9fdb4fa6bd3a8b927d461b8e610932c4ba137d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71461e4dd644e119f57aece7d9fdb4fa6bd3a8b927d461b8e610932c4ba137d6
Size

4.6MB
Sample

230920-2a9hxsda49
MD5

00749a0b7946a662d1cedaf7631e0588
SHA1

02cb394ebf7d4a7247cb36e20d6759d963cda944
SHA256

71461e4dd644e119f57aece7d9fdb4fa6bd3a8b927d461b8e610932c4ba137d6
SHA512

c48da668cd3967a31fc7a543e6b2fe43a8079c814352f71df587e22ff30ce5f8d53e3c5daec1d7c9bb0e84eef990e2203e4543c12216bb5baca36b38344c7003
SSDEEP

49152:rdZaZVtStPolCWw9ru5635IIeIIIXhRxs4+zGKbDS62hH51LhwiNPR+KgY:BVFu5qRxsZ/3255Ma+

Score

7^/10

Malware Config

Targets

- Target
  
  71461e4dd644e119f57aece7d9fdb4fa6bd3a8b927d461b8e610932c4ba137d6
- Size
  
  4.6MB
- MD5
  
  00749a0b7946a662d1cedaf7631e0588
- SHA1
  
  02cb394ebf7d4a7247cb36e20d6759d963cda944
- SHA256
  
  71461e4dd644e119f57aece7d9fdb4fa6bd3a8b927d461b8e610932c4ba137d6
- SHA512
  
  c48da668cd3967a31fc7a543e6b2fe43a8079c814352f71df587e22ff30ce5f8d53e3c5daec1d7c9bb0e84eef990e2203e4543c12216bb5baca36b38344c7003
- SSDEEP
  
  49152:rdZaZVtStPolCWw9ru5635IIeIIIXhRxs4+zGKbDS62hH51LhwiNPR+KgY:BVFu5qRxsZ/3255Ma+
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2