General

  • Target

    4d87f300fe65df8a9d1ed1ea769c46fc6e8f3596e88befc3fe3a42d1ad4d52c0

  • Size

    92KB

  • Sample

    221123-xlwzraad4z

  • MD5

    48da3b30b7b122cb40ae37c6cee610b0

  • SHA1

    1e5881081190400d4521f0a9be356732f2aa7627

  • SHA256

    4d87f300fe65df8a9d1ed1ea769c46fc6e8f3596e88befc3fe3a42d1ad4d52c0

  • SHA512

    25969a0bc1f65124061ba7e0296396013460cf0da2394e035666fc8368cca38f597947aaef8d8aca40376a135480b2b17fc4cef61e6d31c3176f3f8228c9a7fd

  • SSDEEP

    1536:9di4hPjjBkvWN/3HgGl+CocTzFJ0T72VpQ8:vN7/HpBTzFJ0T72c8

Score
10/10

Malware Config

Targets

    • Target

      4d87f300fe65df8a9d1ed1ea769c46fc6e8f3596e88befc3fe3a42d1ad4d52c0

    • Size

      92KB

    • MD5

      48da3b30b7b122cb40ae37c6cee610b0

    • SHA1

      1e5881081190400d4521f0a9be356732f2aa7627

    • SHA256

      4d87f300fe65df8a9d1ed1ea769c46fc6e8f3596e88befc3fe3a42d1ad4d52c0

    • SHA512

      25969a0bc1f65124061ba7e0296396013460cf0da2394e035666fc8368cca38f597947aaef8d8aca40376a135480b2b17fc4cef61e6d31c3176f3f8228c9a7fd

    • SSDEEP

      1536:9di4hPjjBkvWN/3HgGl+CocTzFJ0T72VpQ8:vN7/HpBTzFJ0T72c8

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks