General

  • Target

    002dd3cc295533e89086788017328208013625883a465809610b52d91c6575b2

  • Size

    437KB

  • Sample

    220516-z18m7sheh2

  • MD5

    dad944c9e92274eacdada200ba39d74b

  • SHA1

    ef03ad94bdb78a5a9064868ab58c80d9a2808090

  • SHA256

    002dd3cc295533e89086788017328208013625883a465809610b52d91c6575b2

  • SHA512

    8fbeedf9bca9a09972b277480340aa517b702c9eb9d573aea7f515fcd7fa3b43d592c6c5a9a5cf298f1127e32b38dc9d12d1236fed2fe694cbc4057aff281b49

Score
10/10

Malware Config

Targets

    • Target

      002dd3cc295533e89086788017328208013625883a465809610b52d91c6575b2

    • Size

      437KB

    • MD5

      dad944c9e92274eacdada200ba39d74b

    • SHA1

      ef03ad94bdb78a5a9064868ab58c80d9a2808090

    • SHA256

      002dd3cc295533e89086788017328208013625883a465809610b52d91c6575b2

    • SHA512

      8fbeedf9bca9a09972b277480340aa517b702c9eb9d573aea7f515fcd7fa3b43d592c6c5a9a5cf298f1127e32b38dc9d12d1236fed2fe694cbc4057aff281b49

    Score
    10/10
    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks