Resubmissions

02-05-2023 01:01

230502-bc8rashc34 7

02-05-2023 00:11

230502-ag1e2shb52 7

01-05-2023 21:35

230501-1fjc9agg85 8

01-05-2023 20:20

230501-y4lgeaad31 7

General

  • Target

    DBS.IMG

  • Size

    1.2MB

  • Sample

    230502-ag1e2shb52

  • MD5

    266e3ca963a3bbae9dff800d7f22e204

  • SHA1

    b4e87d7a764794b98acae5ec54e018ecad47995c

  • SHA256

    4ad4c824651649fca236f7bab751aaa00ba24725a53c6f0700d3b729507a6a8b

  • SHA512

    3244078b2167557a21dd526d353c9d4131443ce5ea8df9a4c13a2147ad2e52e9c387c8586eb3cd3c40d58876fc7ae77f1279ceb5ef9248bf252f9c43fff675cf

  • SSDEEP

    12288:SZZ2iNvj2vIUMgaw+UzS/soUHBaqLcKc8V5:C1tjCTa8S/2HkqL5

Score
7/10

Malware Config

Targets

    • Target

      DBS.EXE

    • Size

      683KB

    • MD5

      7c12f6fec9bc7980dd057bff668edfee

    • SHA1

      09581aea5c7737e401181a4c1af42898cb5c363e

    • SHA256

      2219e96c7736e6edc02fe0ff151ee8e0116b8b0dbcf38d7ee91ab246b4fed0a0

    • SHA512

      906cd2e4515d224b223675c015e0afcde2d7c8bafa9b316a4f49710d9ebb9a67c26e316e02b34953d4e1507fcff72d4d52ef4e608368165debe72158512e43b2

    • SSDEEP

      12288:PZZ2iNvj2vIUMgaw+UzS/soUHBaqLcKc8V5:n1tjCTa8S/2HkqL5

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks