6fa00eb058a905a37530d00bc51ed96a71c912d4aa56a52b4169f66df61b5ed5 | Triage

Sharing

General

Target

09450bba1268c7aa95cce5316f810780N.exe
Size

43KB
Sample

240802-1pw1ps1gqp
MD5

09450bba1268c7aa95cce5316f810780
SHA1

a43f61f50b4233ced5f9cb0569b2aebd1f6e2427
SHA256

6fa00eb058a905a37530d00bc51ed96a71c912d4aa56a52b4169f66df61b5ed5
SHA512

f9647cd03a6b07236a5487ca3bd582ca4e85bff8c093d124dfe7eabe7509014df23e2d1afc5f9960e43320914401804220c4c75375970de6d6389cf8687367cc
SSDEEP

768:dYGtdtFR6M13vfdHldhwyEr+OGa0aEYS1y9YaPQZ:GIUM13vfdHldhwt+OGa01oiaPQZ

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  09450bba1268c7aa95cce5316f810780N.exe
- Size
  
  43KB
- MD5
  
  09450bba1268c7aa95cce5316f810780
- SHA1
  
  a43f61f50b4233ced5f9cb0569b2aebd1f6e2427
- SHA256
  
  6fa00eb058a905a37530d00bc51ed96a71c912d4aa56a52b4169f66df61b5ed5
- SHA512
  
  f9647cd03a6b07236a5487ca3bd582ca4e85bff8c093d124dfe7eabe7509014df23e2d1afc5f9960e43320914401804220c4c75375970de6d6389cf8687367cc
- SSDEEP
  
  768:dYGtdtFR6M13vfdHldhwyEr+OGa0aEYS1y9YaPQZ:GIUM13vfdHldhwt+OGa01oiaPQZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2