General

  • Target

    8a33619a36d5c1aa3e59abfb3038394e9269e64555922bca1e02875946d3a130

  • Size

    379KB

  • Sample

    220502-sp3jgsadfl

  • MD5

    65475d967681aa9ccf49e1a6b09d4112

  • SHA1

    f027911454a5e72cea565014be3bf6cf10ec994e

  • SHA256

    8a33619a36d5c1aa3e59abfb3038394e9269e64555922bca1e02875946d3a130

  • SHA512

    51f812581e6ef1f23d8232ac1f8b684f3bf1ec8427f492d5404c5718b5eea2de7e6088e28575a4d50b37fb5a31f4d23d7271aeaf45eaf41730e26f182a2d9848

Score
10/10

Malware Config

Targets

    • Target

      8a33619a36d5c1aa3e59abfb3038394e9269e64555922bca1e02875946d3a130

    • Size

      379KB

    • MD5

      65475d967681aa9ccf49e1a6b09d4112

    • SHA1

      f027911454a5e72cea565014be3bf6cf10ec994e

    • SHA256

      8a33619a36d5c1aa3e59abfb3038394e9269e64555922bca1e02875946d3a130

    • SHA512

      51f812581e6ef1f23d8232ac1f8b684f3bf1ec8427f492d5404c5718b5eea2de7e6088e28575a4d50b37fb5a31f4d23d7271aeaf45eaf41730e26f182a2d9848

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks