General

  • Target

    e86dbf428bcf0b7ddcb13597820512a4738143de2e2d8b7ac717f147f1cd1f56

  • Size

    360KB

  • Sample

    221003-df242adca6

  • MD5

    49f682d2f4a314edf6fea18ce1744b60

  • SHA1

    3ea82dec2dac5a5c6b5d2fff8983b03ea13d0056

  • SHA256

    e86dbf428bcf0b7ddcb13597820512a4738143de2e2d8b7ac717f147f1cd1f56

  • SHA512

    9c253abd6ab742f0ca2c198a888174b976aab7b995074dd840e7e0533bdeb1c46593bbe23651211d97b5c7a237e61bf15d027f7e58d3ddac772a9d9f1bb6cfe7

  • SSDEEP

    6144:KGTTBOV6r4UZN6tj3tjuPQxD4b8/RqIsSp7ibSaZt/DIT4WT:lOVrUZN6tj99D4b8/EIsSp7ibSaZh0TV

Score
10/10

Malware Config

Targets

    • Target

      e86dbf428bcf0b7ddcb13597820512a4738143de2e2d8b7ac717f147f1cd1f56

    • Size

      360KB

    • MD5

      49f682d2f4a314edf6fea18ce1744b60

    • SHA1

      3ea82dec2dac5a5c6b5d2fff8983b03ea13d0056

    • SHA256

      e86dbf428bcf0b7ddcb13597820512a4738143de2e2d8b7ac717f147f1cd1f56

    • SHA512

      9c253abd6ab742f0ca2c198a888174b976aab7b995074dd840e7e0533bdeb1c46593bbe23651211d97b5c7a237e61bf15d027f7e58d3ddac772a9d9f1bb6cfe7

    • SSDEEP

      6144:KGTTBOV6r4UZN6tj3tjuPQxD4b8/RqIsSp7ibSaZt/DIT4WT:lOVrUZN6tj99D4b8/EIsSp7ibSaZh0TV

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks