General

  • Target

    4d48f65f2acca0791c68cc33b75a912be7c328c5b0fdce669e091c746342e126

  • Size

    204KB

  • Sample

    221020-l7bedshah2

  • MD5

    a00845665913572b093687d93a022308

  • SHA1

    8d85470e3ced924fc8b8dbfea89f8f9f73e29e56

  • SHA256

    4d48f65f2acca0791c68cc33b75a912be7c328c5b0fdce669e091c746342e126

  • SHA512

    18ec2ba9205406677f82adebb11840e9356bb447238b54bafcefe341bd8d9881a8179079a95f2235440921af69ddfa800e3b19f05d7183605a23410af805c4ba

  • SSDEEP

    3072:SLRb9okfav4SP1vJcdiQfdRS8V/1wuUBcQZfvr:dnTP1RcESds8V/1wcO

Score
10/10

Malware Config

Targets

    • Target

      4d48f65f2acca0791c68cc33b75a912be7c328c5b0fdce669e091c746342e126

    • Size

      204KB

    • MD5

      a00845665913572b093687d93a022308

    • SHA1

      8d85470e3ced924fc8b8dbfea89f8f9f73e29e56

    • SHA256

      4d48f65f2acca0791c68cc33b75a912be7c328c5b0fdce669e091c746342e126

    • SHA512

      18ec2ba9205406677f82adebb11840e9356bb447238b54bafcefe341bd8d9881a8179079a95f2235440921af69ddfa800e3b19f05d7183605a23410af805c4ba

    • SSDEEP

      3072:SLRb9okfav4SP1vJcdiQfdRS8V/1wuUBcQZfvr:dnTP1RcESds8V/1wcO

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks