Resubmissions

26-12-2022 04:45

221226-fdvy2sff4t 8

21-12-2022 23:37

221221-3mj98sgg4z 8

General

  • Target

    7.hta

  • Size

    1.4MB

  • Sample

    221221-3mj98sgg4z

  • MD5

    dd5b29f38ada264a89dbafab6ed35ec3

  • SHA1

    c77ce7470ff68d53825cc664cec35302e0d197c7

  • SHA256

    1faa9cb2b997e1a07e82087c1722fe12ea1fe5b48897d6edf34c8171b88e12f3

  • SHA512

    3778863b14860a7d939ecc2bf96dd6a79e8ea4452222150d9c5860cb54e1668de731e1989d1490885c824ced9bd24de5822b86669ed64a6769e2546ee13fe1fc

  • SSDEEP

    24576:1jduwC1N3WLIxP456UKkcCByVidDdlYhCNcql2BeqKflYhBepIjmXlcLI:NdA33Kz0ZQDP9Gqnl

Score
8/10

Malware Config

Targets

    • Target

      7.hta

    • Size

      1.4MB

    • MD5

      dd5b29f38ada264a89dbafab6ed35ec3

    • SHA1

      c77ce7470ff68d53825cc664cec35302e0d197c7

    • SHA256

      1faa9cb2b997e1a07e82087c1722fe12ea1fe5b48897d6edf34c8171b88e12f3

    • SHA512

      3778863b14860a7d939ecc2bf96dd6a79e8ea4452222150d9c5860cb54e1668de731e1989d1490885c824ced9bd24de5822b86669ed64a6769e2546ee13fe1fc

    • SSDEEP

      24576:1jduwC1N3WLIxP456UKkcCByVidDdlYhCNcql2BeqKflYhBepIjmXlcLI:NdA33Kz0ZQDP9Gqnl

    Score
    8/10
    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks