Resubmissions

12-04-2023 20:30

230412-zadedagd5s 8

12-04-2023 20:26

230412-y7t8qaeh72 8

26-03-2023 16:01

230326-tgmzhahb39 8

General

  • Target

    HURR-DURR 4.0.exe

  • Size

    1.7MB

  • Sample

    230326-tgmzhahb39

  • MD5

    709002961b4a3d18185690cf820c4758

  • SHA1

    9e45ade994f2d711f12fd1bdd24c76c29190d919

  • SHA256

    39d024d9d590f29e0e522f1e41ac4e5c7bf67ebd261b3fa939b6e0ee883acc59

  • SHA512

    a759d2c16eb3166714d0422e931458ea1bac942f440bd159f7a130e9edaef2fe13090adb4de0ef65d6f66446d929f2152e879d1949c4860654564e9e8f8be916

  • SSDEEP

    12288:JoSWNTJ4Yo1VFnA4r5rraOVokssOcnh2tbbLqhS8aKxk:JoS2TJJo1V6u5rraOVouOcn4tbbR8aqk

Score
8/10

Malware Config

Targets

    • Target

      HURR-DURR 4.0.exe

    • Size

      1.7MB

    • MD5

      709002961b4a3d18185690cf820c4758

    • SHA1

      9e45ade994f2d711f12fd1bdd24c76c29190d919

    • SHA256

      39d024d9d590f29e0e522f1e41ac4e5c7bf67ebd261b3fa939b6e0ee883acc59

    • SHA512

      a759d2c16eb3166714d0422e931458ea1bac942f440bd159f7a130e9edaef2fe13090adb4de0ef65d6f66446d929f2152e879d1949c4860654564e9e8f8be916

    • SSDEEP

      12288:JoSWNTJ4Yo1VFnA4r5rraOVokssOcnh2tbbLqhS8aKxk:JoS2TJJo1V6u5rraOVouOcn4tbbR8aqk

    Score
    8/10
    • Possible privilege escalation attempt

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

File Permissions Modification

1
T1222

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Tasks