General

  • Target

    Weave.exe

  • Size

    18.7MB

  • Sample

    240930-hqqafawcpd

  • MD5

    4254b9b53539e0d002171abd6b87f5d2

  • SHA1

    3ec9ea0f1584f6462eb747b495d8ac6f87e9f338

  • SHA256

    3084b724e9803dd9575f293844fe7cc9bb1f734db56198903939dbfa8511795c

  • SHA512

    766f4ac5ac7ffd978a2c0b70902c7b76945433c6f1ab38a59eb56c78c6d706034f65a295fa6cbbd4b05b9190e3f4fdb4862f26bd1951122540746bef90be260c

  • SSDEEP

    393216:D8uUn1HYJ7/3/MOFlS+yLcYU3lMJFGxTOAbBWNZWJFMl860UiNrx:D8Z+f/MOFT1Z1MCxYZWJF28601Zx

Score
7/10

Malware Config

Targets

    • Target

      Weave.exe

    • Size

      18.7MB

    • MD5

      4254b9b53539e0d002171abd6b87f5d2

    • SHA1

      3ec9ea0f1584f6462eb747b495d8ac6f87e9f338

    • SHA256

      3084b724e9803dd9575f293844fe7cc9bb1f734db56198903939dbfa8511795c

    • SHA512

      766f4ac5ac7ffd978a2c0b70902c7b76945433c6f1ab38a59eb56c78c6d706034f65a295fa6cbbd4b05b9190e3f4fdb4862f26bd1951122540746bef90be260c

    • SSDEEP

      393216:D8uUn1HYJ7/3/MOFlS+yLcYU3lMJFGxTOAbBWNZWJFMl860UiNrx:D8Z+f/MOFT1Z1MCxYZWJF28601Zx

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks