General

  • Target

    OfficeClickToRun.exe

  • Size

    5.0MB

  • Sample

    230516-we39taba5v

  • MD5

    305b489297b55ca1a0ea90104635a57d

  • SHA1

    70f6653d653b8aa1727241d687e75e10e8113412

  • SHA256

    09b25f421a7e8beda58978dfc5ddea254d59c595dcac7f2ed8f799963111ae9b

  • SHA512

    cfc4ea7b324aa3891df390b0f535a69b625100216d87a214e18e51f34aa4043cadefa718912c483bf39c497a195b5abbc418e8e5bd75f942ed47c751b29c7466

  • SSDEEP

    98304:hgrgH1HJzOyoKD1i5D+ZAzruaI6HMaJTtGbd:eK1ppoKxi5DQVaI6HMaJTtGbd

Score
5/10

Malware Config

Targets

    • Target

      OfficeClickToRun.exe

    • Size

      5.0MB

    • MD5

      305b489297b55ca1a0ea90104635a57d

    • SHA1

      70f6653d653b8aa1727241d687e75e10e8113412

    • SHA256

      09b25f421a7e8beda58978dfc5ddea254d59c595dcac7f2ed8f799963111ae9b

    • SHA512

      cfc4ea7b324aa3891df390b0f535a69b625100216d87a214e18e51f34aa4043cadefa718912c483bf39c497a195b5abbc418e8e5bd75f942ed47c751b29c7466

    • SSDEEP

      98304:hgrgH1HJzOyoKD1i5D+ZAzruaI6HMaJTtGbd:eK1ppoKxi5DQVaI6HMaJTtGbd

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks