General

  • Target

    d73b5c9ba3ddf0b41ea66cf4eea9098d4e810d195cfc37539010d6e49b954344

  • Size

    241KB

  • Sample

    220503-zay13sefcn

  • MD5

    917ccb7eb85219db2ff8104945bec3eb

  • SHA1

    480b275fe4a9533617147086d32e39618b29a9df

  • SHA256

    d73b5c9ba3ddf0b41ea66cf4eea9098d4e810d195cfc37539010d6e49b954344

  • SHA512

    6d239a4d544c8b6245e6d18bdd2eafd8b953f0917174f3123780dab64c0d9b5369285740df70bb56b5e0a11e8259861c6d80d77d2bfe8a2cb47d64f39cab99e8

Score
10/10

Malware Config

Targets

    • Target

      d73b5c9ba3ddf0b41ea66cf4eea9098d4e810d195cfc37539010d6e49b954344

    • Size

      241KB

    • MD5

      917ccb7eb85219db2ff8104945bec3eb

    • SHA1

      480b275fe4a9533617147086d32e39618b29a9df

    • SHA256

      d73b5c9ba3ddf0b41ea66cf4eea9098d4e810d195cfc37539010d6e49b954344

    • SHA512

      6d239a4d544c8b6245e6d18bdd2eafd8b953f0917174f3123780dab64c0d9b5369285740df70bb56b5e0a11e8259861c6d80d77d2bfe8a2cb47d64f39cab99e8

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks