General

  • Target

    8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

  • Size

    359KB

  • Sample

    220501-3lvdtabccn

  • MD5

    c1c77cd18545ba757940a2cdace71b7b

  • SHA1

    067a14bfefc5e075d693b19e6ecff1e372a87304

  • SHA256

    8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

  • SHA512

    a5e142c753d01260865aa5324aefb9447c74df2513114c8308b4c19a763a96f7ab80b746dfc4863da55c30d16c473ad3c76066c6bcc66bdeb32c768ceaff81fd

Score
10/10

Malware Config

Targets

    • Target

      8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

    • Size

      359KB

    • MD5

      c1c77cd18545ba757940a2cdace71b7b

    • SHA1

      067a14bfefc5e075d693b19e6ecff1e372a87304

    • SHA256

      8b7dda6da34ef681560f2c0c22c2dfd0c950f5dc24fa21fa09f61350095c8b75

    • SHA512

      a5e142c753d01260865aa5324aefb9447c74df2513114c8308b4c19a763a96f7ab80b746dfc4863da55c30d16c473ad3c76066c6bcc66bdeb32c768ceaff81fd

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks