Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2024, 08:34
Static task
static1
Behavioral task
behavioral1
Sample
48829f2379d2e799e28d656fd76b8512.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48829f2379d2e799e28d656fd76b8512.exe
Resource
win10v2004-20231215-en
General
-
Target
48829f2379d2e799e28d656fd76b8512.exe
-
Size
2KB
-
MD5
48829f2379d2e799e28d656fd76b8512
-
SHA1
4e8c85def4d7eebdf45bd05244595dea4c9c6fb8
-
SHA256
40407f258c8f402cb0fa13d027125aa579f0d49e5bb35ae3263d0dbc21a9391a
-
SHA512
4ff0514fa7de4201c48f3c1a600344324f3ef31d19d4ce240bd4f4f58bcd6699ca21831462d2411c9567ac57ab543356510507ac4272fd602ea48e9d9c0c84bb
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000\Control Panel\International\Geo\Nation 48829f2379d2e799e28d656fd76b8512.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD58d4c07efda188f4ca3290b68b7b5c2b4
SHA1ba392480e4f36eaf02ce8df0e7b3ca86aebbd3ea
SHA256e27b64c9737988f9d6a1bff653e7de7b46c8150133d6b4e9061b70d70dbde8b4
SHA512fbbd1b4596151b13a9de1ed87c37783f2e7519c1e0b7f90fe00cba33a848b538fcb8474d0975fb18568085e81e84053d4ec2f18021fcc76cda68e0b808ed2ef2