General

  • Target

    test.exe

  • Size

    430KB

  • Sample

    230414-rdgl7sbf3z

  • MD5

    26b81ae52bf2c73d19636e5a364a17ed

  • SHA1

    3ce65b5a03e1d3a50b3e07fa66f4f482269d5745

  • SHA256

    fadf983d577d2731c074e876bb030be0b76d9fc91abd0a4a54c2b28c6c0b96de

  • SHA512

    279232967e33fdd1e3be13122ec43fc5c3eccd5c59395b0d2c66684b016b1ccdb0db96a1b6abf0b9f313ee8e1ae6ef2e25c00d0d205d94223861ca57dc1c9cf1

  • SSDEEP

    12288:xgZXEAO/BUdG3gVdt7K1mzRcX3loDHHJv0H:xgZXoZUTVdt7K1wcXVojVc

Score
7/10

Malware Config

Targets

    • Target

      test.exe

    • Size

      430KB

    • MD5

      26b81ae52bf2c73d19636e5a364a17ed

    • SHA1

      3ce65b5a03e1d3a50b3e07fa66f4f482269d5745

    • SHA256

      fadf983d577d2731c074e876bb030be0b76d9fc91abd0a4a54c2b28c6c0b96de

    • SHA512

      279232967e33fdd1e3be13122ec43fc5c3eccd5c59395b0d2c66684b016b1ccdb0db96a1b6abf0b9f313ee8e1ae6ef2e25c00d0d205d94223861ca57dc1c9cf1

    • SSDEEP

      12288:xgZXEAO/BUdG3gVdt7K1mzRcX3loDHHJv0H:xgZXoZUTVdt7K1wcXVojVc

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks