General

  • Target

    6e6b1e30067cbef3cf65a637ed4e418a59ff8aeb2a0f7264e7c2f21aeb57f7ce

  • Size

    877KB

  • Sample

    221201-ec4n5abg53

  • MD5

    3188b811a480c3fb4ea85c2cdc69a9d0

  • SHA1

    82fd9c6f50115e924d427a27c56fa58a925d6805

  • SHA256

    6e6b1e30067cbef3cf65a637ed4e418a59ff8aeb2a0f7264e7c2f21aeb57f7ce

  • SHA512

    8bf66f81c3175897279d0a8423d1ad052222e80f38308669d0548a7621ff5e48e7f91d3193cf10a5d26e61e810ecbd5d5b53adacb47cb95bf9886429bcbf3369

  • SSDEEP

    24576:EGM89mbMXCr8HgEZbySRiOfLNztd8oLlYSc6:EGM8io3uSRB5ztd8DS

Score
8/10

Malware Config

Targets

    • Target

      6e6b1e30067cbef3cf65a637ed4e418a59ff8aeb2a0f7264e7c2f21aeb57f7ce

    • Size

      877KB

    • MD5

      3188b811a480c3fb4ea85c2cdc69a9d0

    • SHA1

      82fd9c6f50115e924d427a27c56fa58a925d6805

    • SHA256

      6e6b1e30067cbef3cf65a637ed4e418a59ff8aeb2a0f7264e7c2f21aeb57f7ce

    • SHA512

      8bf66f81c3175897279d0a8423d1ad052222e80f38308669d0548a7621ff5e48e7f91d3193cf10a5d26e61e810ecbd5d5b53adacb47cb95bf9886429bcbf3369

    • SSDEEP

      24576:EGM89mbMXCr8HgEZbySRiOfLNztd8oLlYSc6:EGM8io3uSRB5ztd8DS

    Score
    8/10
    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks