Overview

overview

10

Static

static

1

OIP.jpg

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OIP.jpg

  • Size

    9KB

  • Sample

    230320-vbx3ysge8v

  • MD5

    331f0e98fdbb87f3fd4817a959a0dcfa

  • SHA1

    7a37d2e2d0e8c30666108c9303286ba9dc24a01b

  • SHA256

    894d264c7e7c09645ec20699ec22c5bae09ec8bdd7cc28fef22d519258719d85

  • SHA512

    d41bfce46080f13f893360b6972e4047a5d7da04b6a7320ef92d5c8a9d7df72a6e7f87dddca673bc80439caf88eed60fd3d5dfb6a6bcecdaacf868ce2dae5e6d

  • SSDEEP

    192:YPVRREYcd827lJzVva/Dg/jNW+yivfv8bDquGofjzM5w7sma3z3:uVbs5nvaejsFMv8bDqZszM27s9j

Score
10/10
phishing

Malware Config

Targets

    • Target

      OIP.jpg

    • Size

      9KB

    • MD5

      331f0e98fdbb87f3fd4817a959a0dcfa

    • SHA1

      7a37d2e2d0e8c30666108c9303286ba9dc24a01b

    • SHA256

      894d264c7e7c09645ec20699ec22c5bae09ec8bdd7cc28fef22d519258719d85

    • SHA512

      d41bfce46080f13f893360b6972e4047a5d7da04b6a7320ef92d5c8a9d7df72a6e7f87dddca673bc80439caf88eed60fd3d5dfb6a6bcecdaacf868ce2dae5e6d

    • SSDEEP

      192:YPVRREYcd827lJzVva/Dg/jNW+yivfv8bDquGofjzM5w7sma3z3:uVbs5nvaejsFMv8bDqZszM27s9j

    Score
    10/10
    phishing

    • Detected phishing page

      phishing

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks