Overview

overview

10

Static

static

539efe2484...4d.exe

windows7-x64

10

539efe2484...4d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    539efe24846cc5cd476d50b6690d508743e62b0358bf9aa74fa4dda455bf3f4d

  • Size

    434KB

  • Sample

    220727-a6378sgdek

  • MD5

    e60a53fdbb9c3b317fa294b1f2a5b632

  • SHA1

    587c6f730e6ab168e6d697e4bd02b44df65f4205

  • SHA256

    539efe24846cc5cd476d50b6690d508743e62b0358bf9aa74fa4dda455bf3f4d

  • SHA512

    998c91693fed0519b571607c59135a655dd6f2eae6c3ffe0ff05680d33324227121fd9f8c6ecc717e2aa95d34687d17d55f360ad5a280c32d9003a5776ebf09d

Score
10/10
onlyloggerloader

Malware Config

Targets

    • Target

      539efe24846cc5cd476d50b6690d508743e62b0358bf9aa74fa4dda455bf3f4d

    • Size

      434KB

    • MD5

      e60a53fdbb9c3b317fa294b1f2a5b632

    • SHA1

      587c6f730e6ab168e6d697e4bd02b44df65f4205

    • SHA256

      539efe24846cc5cd476d50b6690d508743e62b0358bf9aa74fa4dda455bf3f4d

    • SHA512

      998c91693fed0519b571607c59135a655dd6f2eae6c3ffe0ff05680d33324227121fd9f8c6ecc717e2aa95d34687d17d55f360ad5a280c32d9003a5776ebf09d

    Score
    10/10
    onlyloggerloader

    • OnlyLogger

      A tiny loader that uses IPLogger to get its payload.

      loaderonlylogger

    • OnlyLogger payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks