Overview

overview

10

Static

static

3c74459ec6...62.exe

windows7_x64

10

3c74459ec6...62.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c74459ec6c11dd5a32d154b27eed6b90c1359edd2edb9f662a5bf9f0e7faf62

  • Size

    435KB

  • Sample

    220703-h847bacdc6

  • MD5

    c1fbe1e2fce911062f0d6b933e8689c3

  • SHA1

    9d21b8582bbbecea6a67ce40906a975d99504b03

  • SHA256

    3c74459ec6c11dd5a32d154b27eed6b90c1359edd2edb9f662a5bf9f0e7faf62

  • SHA512

    ba46705dfca8cb75707ca07b87f876a1217932522a7c14a69ccdc7822940aa8d9abdeeefba8517044d133b55041ecd8771c69c790b5ea2bc25e32fc1a1c69e3a

Score
10/10
onlyloggerloader

Malware Config

Targets

    • Target

      3c74459ec6c11dd5a32d154b27eed6b90c1359edd2edb9f662a5bf9f0e7faf62

    • Size

      435KB

    • MD5

      c1fbe1e2fce911062f0d6b933e8689c3

    • SHA1

      9d21b8582bbbecea6a67ce40906a975d99504b03

    • SHA256

      3c74459ec6c11dd5a32d154b27eed6b90c1359edd2edb9f662a5bf9f0e7faf62

    • SHA512

      ba46705dfca8cb75707ca07b87f876a1217932522a7c14a69ccdc7822940aa8d9abdeeefba8517044d133b55041ecd8771c69c790b5ea2bc25e32fc1a1c69e3a

    Score
    10/10
    onlyloggerloader

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger Payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks