General

  • Target

    57420a15e466c520a017bc48b1bc48ba5f0df1380459ac3762cef28bb6cc031f

  • Size

    300KB

  • Sample

    221124-am65saeh49

  • MD5

    34f01d1ea94967addebe0d7a6c0862c0

  • SHA1

    cf5ee2d2334c75830918b01eff9237b30433dcfd

  • SHA256

    57420a15e466c520a017bc48b1bc48ba5f0df1380459ac3762cef28bb6cc031f

  • SHA512

    a50a2f2e4fba0bf8d1e3999b9784fc2acc79e98443027f3f2a90e8cd2f626fdb10dfed6e0ecaadaeb68150d02528168da37284e6e6d19de01cc61007f3641a88

  • SSDEEP

    3072:xdFaKfxFYx7z3pXJfvhMWKINBd/kqARk42rAzaOvZyNRQmkgXqjH5UFcjrf+HhDo:LFaKpFY/kJqeNhi0GTvHMww3y/IAFMsq

Score
10/10

Malware Config

Targets

    • Target

      57420a15e466c520a017bc48b1bc48ba5f0df1380459ac3762cef28bb6cc031f

    • Size

      300KB

    • MD5

      34f01d1ea94967addebe0d7a6c0862c0

    • SHA1

      cf5ee2d2334c75830918b01eff9237b30433dcfd

    • SHA256

      57420a15e466c520a017bc48b1bc48ba5f0df1380459ac3762cef28bb6cc031f

    • SHA512

      a50a2f2e4fba0bf8d1e3999b9784fc2acc79e98443027f3f2a90e8cd2f626fdb10dfed6e0ecaadaeb68150d02528168da37284e6e6d19de01cc61007f3641a88

    • SSDEEP

      3072:xdFaKfxFYx7z3pXJfvhMWKINBd/kqARk42rAzaOvZyNRQmkgXqjH5UFcjrf+HhDo:LFaKpFY/kJqeNhi0GTvHMww3y/IAFMsq

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks