General

  • Target

    24d743f2aff89a87b7c50899d8095f0a20f8cb39dae9e45766794692bc83d5ee

  • Size

    6.1MB

  • Sample

    221029-ftstmadaar

  • MD5

    6f8a906d2432c9bcbd8e1fd1efd31ee8

  • SHA1

    23f6a76213f318ce76d09b0a3d1d4dbdfc29d3de

  • SHA256

    24d743f2aff89a87b7c50899d8095f0a20f8cb39dae9e45766794692bc83d5ee

  • SHA512

    8f7f838e62ad8a721decb9c29312e3176a53a81d9821d5970f3f2b78cf1cf7ff9c6fb1b833437900479a2361c15ad968b563d34ada77dfc99e3abd2712ea2c1b

  • SSDEEP

    196608:IkNpO8iuMyHdeJJXjPLj7pJL16Iornobe3:5cEiXjv16R

Score
8/10

Malware Config

Targets

    • Target

      24d743f2aff89a87b7c50899d8095f0a20f8cb39dae9e45766794692bc83d5ee

    • Size

      6.1MB

    • MD5

      6f8a906d2432c9bcbd8e1fd1efd31ee8

    • SHA1

      23f6a76213f318ce76d09b0a3d1d4dbdfc29d3de

    • SHA256

      24d743f2aff89a87b7c50899d8095f0a20f8cb39dae9e45766794692bc83d5ee

    • SHA512

      8f7f838e62ad8a721decb9c29312e3176a53a81d9821d5970f3f2b78cf1cf7ff9c6fb1b833437900479a2361c15ad968b563d34ada77dfc99e3abd2712ea2c1b

    • SSDEEP

      196608:IkNpO8iuMyHdeJJXjPLj7pJL16Iornobe3:5cEiXjv16R

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks