09a1a297ab09fc94543352cf378f095d446ddd8c6a5a04a5c277c4bf41b979fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09a1a297ab09fc94543352cf378f095d446ddd8c6a5a04a5c277c4bf41b979fc
Size

44KB
Sample

240911-w5q26swbjq
MD5

aba567e8e110913e7af66601e97d7237
SHA1

4626f15edd0f66ab7ae24ecc85bbae803c2132ff
SHA256

09a1a297ab09fc94543352cf378f095d446ddd8c6a5a04a5c277c4bf41b979fc
SHA512

b3e48d951b937d087294c45b2ca619dbf52cf58f88c0d5229ee5949c1a42fac27facf4bcbada34127bf74f7a1ced7f498fa4d82a65480e9e1b389a2107dd89d4
SSDEEP

384:EACDQL/TQfYjQXoHyglpIK0KYTA6QXEVvYpMlQYpxlqiq8sSKpEqcyzU:EXQLGCQYHyY6gX8v+slxa4

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  09a1a297ab09fc94543352cf378f095d446ddd8c6a5a04a5c277c4bf41b979fc
- Size
  
  44KB
- MD5
  
  aba567e8e110913e7af66601e97d7237
- SHA1
  
  4626f15edd0f66ab7ae24ecc85bbae803c2132ff
- SHA256
  
  09a1a297ab09fc94543352cf378f095d446ddd8c6a5a04a5c277c4bf41b979fc
- SHA512
  
  b3e48d951b937d087294c45b2ca619dbf52cf58f88c0d5229ee5949c1a42fac27facf4bcbada34127bf74f7a1ced7f498fa4d82a65480e9e1b389a2107dd89d4
- SSDEEP
  
  384:EACDQL/TQfYjQXoHyglpIK0KYTA6QXEVvYpMlQYpxlqiq8sSKpEqcyzU:EXQLGCQYHyY6gX8v+slxa4
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2