General

  • Target

    fca3af2c92804f9881e4450b98946a32b1ede07717a9b1e39895f136b80789e4

  • Size

    361KB

  • Sample

    220501-3lr9fseeg8

  • MD5

    68daf3788dbf7974f661e359de3cc9d1

  • SHA1

    6f8c8ba498b2f32cf4caedb1fa4d7c26b6757498

  • SHA256

    fca3af2c92804f9881e4450b98946a32b1ede07717a9b1e39895f136b80789e4

  • SHA512

    32ff8200e0636dce976a1ec5c964e118a5b2ce3b0e04c9c35c4370bc668b7c8be2cf2f185ca2e0d146e0052fcc50d789f6450ae985819f1c306d4c0db3325f9d

Score
10/10

Malware Config

Targets

    • Target

      fca3af2c92804f9881e4450b98946a32b1ede07717a9b1e39895f136b80789e4

    • Size

      361KB

    • MD5

      68daf3788dbf7974f661e359de3cc9d1

    • SHA1

      6f8c8ba498b2f32cf4caedb1fa4d7c26b6757498

    • SHA256

      fca3af2c92804f9881e4450b98946a32b1ede07717a9b1e39895f136b80789e4

    • SHA512

      32ff8200e0636dce976a1ec5c964e118a5b2ce3b0e04c9c35c4370bc668b7c8be2cf2f185ca2e0d146e0052fcc50d789f6450ae985819f1c306d4c0db3325f9d

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks