Resubmissions

22-03-2024 10:29

240322-mjq1lsdc6w 8

08-05-2023 11:46

230508-nxdg4sad72 7

08-05-2023 11:33

230508-nn5j8sad52 7

General

  • Target

    e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a.7z

  • Size

    104.3MB

  • Sample

    230508-nn5j8sad52

  • MD5

    a5ec3cc8b641474e277c8277d228c490

  • SHA1

    1b1981e09fda2880f6d2914ed8c42c6915376138

  • SHA256

    c787cef9e7216be955d5f4ff7b305f3f08d1d283ac3f09a01f821bf7b2d4a9a2

  • SHA512

    f47331c336bd51fe1594f7bcd414d19c881954205cb5e9e4c0bd964efe1be9ac5f262fb35cf77abba4ad470a2e24f9611329f4a36679d75760664e8055dd8677

  • SSDEEP

    3145728:dXmm9U2pg/nJSeKHDUc2FofSxwj3WpAerPQ1:xmGU2pgP0HDUc2PA3Ek1

Score
7/10

Malware Config

Targets

    • Target

      e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a/activator.exe

    • Size

      34.0MB

    • MD5

      ec78b42d48246195cbe1180360681b90

    • SHA1

      017ec0ac62f7512c990e6d07b1399861d6e8c4f5

    • SHA256

      e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a

    • SHA512

      a461829596bfd050c733a38c83cdefc53f1b6c6ce48c3f14b7eaaf867bd58a87a19b17c9bbcfea5883e27c7547da8e2c78ea6ed8086986c4aa1c2de50c763dd4

    • SSDEEP

      393216:bcvSm8PjCEyF74qWuRTk15Bot2FCHMA28a2M/a16fPHEZe9tY1bTqE:bcD87qBW2XwoHMA28ae6fzY1b2E

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

4
T1012

System Information Discovery

3
T1082

Tasks