General

  • Target

    INQ 4419-R1.exe

  • Size

    420KB

  • Sample

    231211-pdwd9aebcn

  • MD5

    b85a69cbd2e9dbbb2f5d3141bb942daf

  • SHA1

    6f460df7dcbbd0209fcda977a6056086b2e39620

  • SHA256

    4cd1a3fabda64aa2ed1c81643bd46bd8698038f0c5be83e408ecd1c4fa175c63

  • SHA512

    aace1d881cf6dd109377191a953bc11701686e3d5b79bce0b76d588090c217ea1f5ade50fe83f32428abee67f3af2e22d789a90e8d947a5e71e6d25e7d1ea2c9

  • SSDEEP

    12288:RGSuP0Pf27bI2aiCpvcwvuqDqXncc6E8Vy+CwY3zCE:RluPUN2anpBW1XR8Vhij

Score
7/10

Malware Config

Targets

    • Target

      INQ 4419-R1.exe

    • Size

      420KB

    • MD5

      b85a69cbd2e9dbbb2f5d3141bb942daf

    • SHA1

      6f460df7dcbbd0209fcda977a6056086b2e39620

    • SHA256

      4cd1a3fabda64aa2ed1c81643bd46bd8698038f0c5be83e408ecd1c4fa175c63

    • SHA512

      aace1d881cf6dd109377191a953bc11701686e3d5b79bce0b76d588090c217ea1f5ade50fe83f32428abee67f3af2e22d789a90e8d947a5e71e6d25e7d1ea2c9

    • SSDEEP

      12288:RGSuP0Pf27bI2aiCpvcwvuqDqXncc6E8Vy+CwY3zCE:RluPUN2anpBW1XR8Vhij

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks