General

  • Target

    1a0efe15362230c78bcb44bdfade4c5d8b53134c8f1fe29bdbd722d1bc6c70b4

  • Size

    6.7MB

  • Sample

    221122-lrwemahb99

  • MD5

    551ceea2dfafacb903090451f36ba5cc

  • SHA1

    976f0a615535e6053b6ddd2dcc0bc69e8d8747c0

  • SHA256

    1a0efe15362230c78bcb44bdfade4c5d8b53134c8f1fe29bdbd722d1bc6c70b4

  • SHA512

    4e308de4bfc8a5f2e69fb295fa5caf001afc698eecaac0c0c727b7188a4ff07d670b11502c593236b9b0ff054dec1b85391c5d6eb7738376f3646dbfb523cff5

  • SSDEEP

    196608:YOaHAkPbQrkV44NOqWn9x5Y7HM4BHzu3CTLEQ48h:+wH4NO775YbM4BHzu3sLf

Score
8/10

Malware Config

Targets

    • Target

      1a0efe15362230c78bcb44bdfade4c5d8b53134c8f1fe29bdbd722d1bc6c70b4

    • Size

      6.7MB

    • MD5

      551ceea2dfafacb903090451f36ba5cc

    • SHA1

      976f0a615535e6053b6ddd2dcc0bc69e8d8747c0

    • SHA256

      1a0efe15362230c78bcb44bdfade4c5d8b53134c8f1fe29bdbd722d1bc6c70b4

    • SHA512

      4e308de4bfc8a5f2e69fb295fa5caf001afc698eecaac0c0c727b7188a4ff07d670b11502c593236b9b0ff054dec1b85391c5d6eb7738376f3646dbfb523cff5

    • SSDEEP

      196608:YOaHAkPbQrkV44NOqWn9x5Y7HM4BHzu3CTLEQ48h:+wH4NO775YbM4BHzu3sLf

    Score
    8/10
    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks