Resubmissions

31/03/2022, 20:37

220331-zel73sdfcn10

31/03/2022, 16:13

220331-tpjxtaafcp10

General

  • Target
    notice.exe
  • Size 350.0MB
  • Sample220331-zel73sdfcn
  • SHA256 f644bef519fc0243633d13f18c97c96d76b95b6f2cbad2a2507fb8177b7e4d1d
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      notice.exe
    • Size 350.0MB
    • SHA256 f644bef519fc0243633d13f18c97c96d76b95b6f2cbad2a2507fb8177b7e4d1d
    • MD5 SHA1 SHA512
    Score
    10/10
    • Modifies WinLogon for persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks