49036b267a62fd2d8c8d476532b1cf4bfa81768d67facd0988ba981601172171 | Triage

Sharing

General

Target

49036b267a62fd2d8c8d476532b1cf4bfa81768d67facd0988ba981601172171.exe
Size

33KB
Sample

241120-e7hp5ssajl
MD5

9c75f43334d80baac2fde81bda5724a4
SHA1

0b8cbb8e0583e7c5a36eaec417d1c44fecd7464b
SHA256

49036b267a62fd2d8c8d476532b1cf4bfa81768d67facd0988ba981601172171
SHA512

a1a7a53d1506993508eb65a205bd37f660251780a3d9a29b50a9774b7289126966eedc417233723453ab50c48b306dd2c457f72d385ae80ca1c44328c07011a8
SSDEEP

384:ODIg+GkEkTfjJGRGWXpS8y9hCm1vMnuhE+3L58UNl0mfuTF:OIHfjgXTmGn/i5K

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  49036b267a62fd2d8c8d476532b1cf4bfa81768d67facd0988ba981601172171.exe
- Size
  
  33KB
- MD5
  
  9c75f43334d80baac2fde81bda5724a4
- SHA1
  
  0b8cbb8e0583e7c5a36eaec417d1c44fecd7464b
- SHA256
  
  49036b267a62fd2d8c8d476532b1cf4bfa81768d67facd0988ba981601172171
- SHA512
  
  a1a7a53d1506993508eb65a205bd37f660251780a3d9a29b50a9774b7289126966eedc417233723453ab50c48b306dd2c457f72d385ae80ca1c44328c07011a8
- SSDEEP
  
  384:ODIg+GkEkTfjJGRGWXpS8y9hCm1vMnuhE+3L58UNl0mfuTF:OIHfjgXTmGn/i5K
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2