General

  • Target

    0219830219301290321012notas.exe

  • Size

    2.0MB

  • Sample

    240223-rwva1sca6s

  • MD5

    a548469585481a1b7f98c9b09d271349

  • SHA1

    677eabeb661d965c7d3d5ff6f6b9336e27b80b91

  • SHA256

    21340c04b12af92f3bd3dd076e5a4f20c0fe5558461b5ff3f848e5d5b7183322

  • SHA512

    b40102429700b056c01953414b3a8f4c86242ee3d98478a834cb49fcaeca0e668e9d297af67c48733eeaa5bda7f6d3962b2248ce1adadf5969ffea997ecfffc1

  • SSDEEP

    49152:UMBQcZoX44p0k4icOpl048bBIaPeF/BXoG05ChlszkSJl:UMBQWo7pZuOplcSas/poG0Cvs3

Malware Config

Targets

    • Target

      0219830219301290321012notas.exe

    • Size

      2.0MB

    • MD5

      a548469585481a1b7f98c9b09d271349

    • SHA1

      677eabeb661d965c7d3d5ff6f6b9336e27b80b91

    • SHA256

      21340c04b12af92f3bd3dd076e5a4f20c0fe5558461b5ff3f848e5d5b7183322

    • SHA512

      b40102429700b056c01953414b3a8f4c86242ee3d98478a834cb49fcaeca0e668e9d297af67c48733eeaa5bda7f6d3962b2248ce1adadf5969ffea997ecfffc1

    • SSDEEP

      49152:UMBQcZoX44p0k4icOpl048bBIaPeF/BXoG05ChlszkSJl:UMBQWo7pZuOplcSas/poG0Cvs3

    • Creates new service(s)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks