General

  • Target

    dc848d72c7885494b4a55cca209944a6e8a27ada2b4020829f57c0bcede37b0d

  • Size

    437KB

  • Sample

    221123-s6pnysdb76

  • MD5

    00d2f2d26012cf7af715768e33f83504

  • SHA1

    e665130336b73ccc586f4e366a29ae1229d4dc49

  • SHA256

    dc848d72c7885494b4a55cca209944a6e8a27ada2b4020829f57c0bcede37b0d

  • SHA512

    5fe464cc9d11cd5ea2dc2deb78a24abdad764e7c8bc36fb0cb04147e0861c69abf9c49c54807264be80cc60d9cbe94dad5594b6dffb5de926e1f23719bfaaa83

  • SSDEEP

    6144:nim1FMLBBvpIjSUdhFZH6l0b1rLWgRYuC:KLBvdkaYVC

Score
8/10

Malware Config

Targets

    • Target

      dc848d72c7885494b4a55cca209944a6e8a27ada2b4020829f57c0bcede37b0d

    • Size

      437KB

    • MD5

      00d2f2d26012cf7af715768e33f83504

    • SHA1

      e665130336b73ccc586f4e366a29ae1229d4dc49

    • SHA256

      dc848d72c7885494b4a55cca209944a6e8a27ada2b4020829f57c0bcede37b0d

    • SHA512

      5fe464cc9d11cd5ea2dc2deb78a24abdad764e7c8bc36fb0cb04147e0861c69abf9c49c54807264be80cc60d9cbe94dad5594b6dffb5de926e1f23719bfaaa83

    • SSDEEP

      6144:nim1FMLBBvpIjSUdhFZH6l0b1rLWgRYuC:KLBvdkaYVC

    Score
    8/10
    • Executes dropped EXE

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks