2a1de49fc1ae3658e62bc8d5ff4c9da83137afc7a6053566b8c99bb8ce4be3e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a1de49fc1ae3658e62bc8d5ff4c9da83137afc7a6053566b8c99bb8ce4be3e3
Size

1.1MB
Sample

240913-wkbfzs1bqg
MD5

145c4fd0b72781e1a19ff06d27668b82
SHA1

029f6858a4d3b821e1587553b1f989a02af510e8
SHA256

2a1de49fc1ae3658e62bc8d5ff4c9da83137afc7a6053566b8c99bb8ce4be3e3
SHA512

6b7dff03a21b017da88861bea4902cf84306027bc10d37fb041bcef3e25f8386d681d1bb61583ac1771aba062340e73e2b08ef0aedf0477ee0a2479751c02570
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qp:acallSllG4ZM7QzMa

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2a1de49fc1ae3658e62bc8d5ff4c9da83137afc7a6053566b8c99bb8ce4be3e3
- Size
  
  1.1MB
- MD5
  
  145c4fd0b72781e1a19ff06d27668b82
- SHA1
  
  029f6858a4d3b821e1587553b1f989a02af510e8
- SHA256
  
  2a1de49fc1ae3658e62bc8d5ff4c9da83137afc7a6053566b8c99bb8ce4be3e3
- SHA512
  
  6b7dff03a21b017da88861bea4902cf84306027bc10d37fb041bcef3e25f8386d681d1bb61583ac1771aba062340e73e2b08ef0aedf0477ee0a2479751c02570
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Qp:acallSllG4ZM7QzMa
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2