6a8619c9bb43784de4c77b858ba0f8ea7d51438c9831c60a25a72728c3148aad

General

Target
Details7101.iso
Size 724KB
Sample221028-dd39baeda8
SHA256 6a8619c9bb43784de4c77b858ba0f8ea7d51438c9831c60a25a72728c3148aad
MD5 89c15fbe5e7d6c958121262dcbe387be
SHA1 832ce0b677cb9f5546be51c5ac002a0987584655
SHA512 ef52ca4f75499c4c76ac2ba56100e549883d6c6495c01c49eb4b617ced903543407d8e97d362dadfb1aeaff2372c5cfb5a1c147ed32015604c299baab9aaf907
SSDEEP 12288:ZqdD/sblafl4M/8toGXJZ6diNjpo8Ywr6t57AKCW3wdOcUwDOMHHCgOWeO:Zqdclafl4eGXuiNW8Ye6cWw4wrHHCgO+
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  Details.lnk
- Size 1KB
- SHA256 e6cb04ff892f951faa671dfa5888254715ff332dad732ef2c11c2abffce8e703
- MD5 0ed29fb82183c419d45096dc9876eeb1
- SHA1 b7f3327a5a43f19b6a89f1943e574704e5e57227
- SHA512 f8a5d30d2ff439003894595f0ef5f6a20c82ad3be56bbb71ab9171a4d24bf9149417ca00688051dbd41dd19eff661ebdcb61f25f7941856447df2e618acf7a01
- MD5 SHA1 SHA512
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2
- Target
  disallowable/expiated.cmd
- Size 347B
- SHA256 f1afcef0c6618cd4bd0889b1844a89ea0d259c4e292f8e109ea17405e56b5a39
- MD5 c130cc03a0c0b1d4c9284c236fefbc25
- SHA1 0dee60c3a561ee60af3d5646a7a19829b8e59b48
- SHA512 30227607f37cf8d6201505018a48438fe1a33832714a8405e241f98e6070b3d13a49ee07f11234fc39e55d239a23c622cfd30f68395489d0099d873cdc1fece8
- MD5 SHA1 SHA512
Score

1^/10
behavioral3 behavioral4
- Target
  disallowable/footballers.dat
- Size 422KB
- SHA256 740cdb22935281aa5b7c7171032cab59b7ce678414f7b8804132cf1edad44dbd
- MD5 d4102defbe24aad31449a9790a5c6449
- SHA1 2ee1bf907aff188094829320ce6cc451772cc49c
- SHA512 d68bbe4000c48222774c2d426ef2b8927b3b8154567b70c409c4c68cee82496be3a0500eaa0805007a883e90bf94648975a145a88c302457b43907018da99842
- SSDEEP 12288:eqdD/sblafl4M/8toGXJZ6diNjpo8Ywr6t57AKC:eqdclafl4eGXuiNW8Ye6c
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Checks computer location settings

Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6