fde368a2009f4af915a5b7dd0f049ce71c3f9ae5a4608f14dd3ca9fb3af9a17c | Triage

Sharing

General

Target

fde368a2009f4af915a5b7dd0f049ce71c3f9ae5a4608f14dd3ca9fb3af9a17c
Size

6.8MB
Sample

241121-qwepwssmh1
MD5

772cff804d5a5a0cc0ff783f58802134
SHA1

a904f6f5e70fdb9d5149a99bbaddf04008d8e180
SHA256

fde368a2009f4af915a5b7dd0f049ce71c3f9ae5a4608f14dd3ca9fb3af9a17c
SHA512

1a6ee8c24a40607f56d63802ff91ee7f7aa9f22be18d06e85607639de5eef12e273a958c31f719be0ffede8ae2e96b4a294964c862099dc6b54d30e8296f0deb
SSDEEP

98304:qk9Iu56Zz8gA666Mtqj6i0Mj2QCUUEpd2ihATd1:/ILx8rFUBgZGdRiTf

Score

8^/10

Malware Config

Targets

- Target
  
  fde368a2009f4af915a5b7dd0f049ce71c3f9ae5a4608f14dd3ca9fb3af9a17c
- Size
  
  6.8MB
- MD5
  
  772cff804d5a5a0cc0ff783f58802134
- SHA1
  
  a904f6f5e70fdb9d5149a99bbaddf04008d8e180
- SHA256
  
  fde368a2009f4af915a5b7dd0f049ce71c3f9ae5a4608f14dd3ca9fb3af9a17c
- SHA512
  
  1a6ee8c24a40607f56d63802ff91ee7f7aa9f22be18d06e85607639de5eef12e273a958c31f719be0ffede8ae2e96b4a294964c862099dc6b54d30e8296f0deb
- SSDEEP
  
  98304:qk9Iu56Zz8gA666Mtqj6i0Mj2QCUUEpd2ihATd1:/ILx8rFUBgZGdRiTf
Score

8^/10
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2