General

  • Target

    8c7d5271185346a7edec6c384d3fc09fd37784790575dcacc987ddd8ddd30a88

  • Size

    375KB

  • Sample

    220502-sp2xysgab2

  • MD5

    bffefc68fa2e35cc90673e11b67244e3

  • SHA1

    5b2b50b0a70034e9195d85bdbb19c0566caa4152

  • SHA256

    8c7d5271185346a7edec6c384d3fc09fd37784790575dcacc987ddd8ddd30a88

  • SHA512

    884b078fc0193878c6365a41f394ce6d24329b9727b039e642fd58ea9f3fe7f85c5bd417aae7372cbcc98872119483d796940c9559af568ccce74a2363bbb29d

Score
10/10

Malware Config

Targets

    • Target

      8c7d5271185346a7edec6c384d3fc09fd37784790575dcacc987ddd8ddd30a88

    • Size

      375KB

    • MD5

      bffefc68fa2e35cc90673e11b67244e3

    • SHA1

      5b2b50b0a70034e9195d85bdbb19c0566caa4152

    • SHA256

      8c7d5271185346a7edec6c384d3fc09fd37784790575dcacc987ddd8ddd30a88

    • SHA512

      884b078fc0193878c6365a41f394ce6d24329b9727b039e642fd58ea9f3fe7f85c5bd417aae7372cbcc98872119483d796940c9559af568ccce74a2363bbb29d

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks