General

  • Target

    55667ffa3ee3dc75a5f5d4fbf17bc4fa1c313e6d2008810f071c708ca910f58d

  • Size

    413KB

  • Sample

    220327-gpc32seab6

  • MD5

    d293c81df65fd657d45930c53f8360c2

  • SHA1

    ec5f9df2a5bff77c9ddc94e2f7db70c0bec73ea3

  • SHA256

    55667ffa3ee3dc75a5f5d4fbf17bc4fa1c313e6d2008810f071c708ca910f58d

  • SHA512

    442335268d189b7222c02c406b42d26adabaacd5041abff248c6806c77989c3149f56e61f91ff8b04f880f950d40141b2ea3d842c08c1eb6d30bbf801c477584

Score
10/10

Malware Config

Targets

    • Target

      55667ffa3ee3dc75a5f5d4fbf17bc4fa1c313e6d2008810f071c708ca910f58d

    • Size

      413KB

    • MD5

      d293c81df65fd657d45930c53f8360c2

    • SHA1

      ec5f9df2a5bff77c9ddc94e2f7db70c0bec73ea3

    • SHA256

      55667ffa3ee3dc75a5f5d4fbf17bc4fa1c313e6d2008810f071c708ca910f58d

    • SHA512

      442335268d189b7222c02c406b42d26adabaacd5041abff248c6806c77989c3149f56e61f91ff8b04f880f950d40141b2ea3d842c08c1eb6d30bbf801c477584

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks