General

  • Target

    c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

  • Size

    262KB

  • Sample

    220501-3ltghsbccl

  • MD5

    1893f2bf755227c1c384461a4b190e50

  • SHA1

    0c1b9acfbb2e0b25fc689f718c12fdf496f2ff86

  • SHA256

    c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

  • SHA512

    4cdcd112498fa1331f4f05faf32ec8d1e59dea1ef46e3ed847f6359a4c760f65bdfe94c4db699b04dc1f06e3f6a3941fad718dc3e81671459a890b0918f55109

Score
10/10

Malware Config

Targets

    • Target

      c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

    • Size

      262KB

    • MD5

      1893f2bf755227c1c384461a4b190e50

    • SHA1

      0c1b9acfbb2e0b25fc689f718c12fdf496f2ff86

    • SHA256

      c23bee9b31a9ac2745839feece9acacf743c4d1acb06cdb2f23067670cc671bc

    • SHA512

      4cdcd112498fa1331f4f05faf32ec8d1e59dea1ef46e3ed847f6359a4c760f65bdfe94c4db699b04dc1f06e3f6a3941fad718dc3e81671459a890b0918f55109

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks