Overview

overview

10

Static

static

10

KUMATUBES_Challan.exe

windows7_x64

3

KUMATUBES_Challan.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a2720b1b2f8615c9ac2b2e95c0bd94728bbafd653b6dc86454aa083066f954f

  • Size

    366KB

  • Sample

    220520-qvzcxaebd2

  • MD5

    bef7abb5e38e98bfa6021f5a72337def

  • SHA1

    25064aff48aa02744134e8e2f9febd34d18052f6

  • SHA256

    3a2720b1b2f8615c9ac2b2e95c0bd94728bbafd653b6dc86454aa083066f954f

  • SHA512

    2e253de32c3f6eb1389ade18a718d0f302d30c96887a79f305aa6bd0653959ba242df8cc46a009db0dfebe1c75b4e9bc92fa5da97c2eb45666ee1bbc2cbd9437

Score
10/10
kutaki

Malware Config

Targets

    • Target

      KUMATUBES_Challan.cmd

    • Size

      632KB

    • MD5

      6987b895ed60ef35439c4acdbc2493e4

    • SHA1

      a73ed9c7c97404d04c2a63ca5a5c0f193598c1c1

    • SHA256

      2bd4a68bf90d7d007980c8c9a6ca3859507d6f8ad00c4d53b859ffe9e7311751

    • SHA512

      a38a8296a1017b74df57d3bb0bce5e3866bb3b9374362477f0d4af58ba11e18c33d70dbd1b5c56aac0ed9a5202918cc4efb62ebacca6f34f27416cb81a88ae64

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks