General

  • Target

    4500ee8bbe7936daa71959aeb183c1c589b3a63ade346614f4863f9e70c471f6

  • Size

    207KB

  • Sample

    230608-gmkp4scg66

  • MD5

    c28d1b6d8dc81941c262f19184d05d2b

  • SHA1

    ef0a9e5a4aef90a79ae5ba5eaac32420031f3fe6

  • SHA256

    4500ee8bbe7936daa71959aeb183c1c589b3a63ade346614f4863f9e70c471f6

  • SHA512

    82b26d2484fcfe5aa716f16d5eb2d686477646eb60ca202c67c7fcb3c5a569454b7c60ad6d3e75eb9b62c59c30aee360a996f7a81da63ea120c050f884a4c6ec

  • SSDEEP

    3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score
7/10

Malware Config

Targets

    • Target

      4500ee8bbe7936daa71959aeb183c1c589b3a63ade346614f4863f9e70c471f6

    • Size

      207KB

    • MD5

      c28d1b6d8dc81941c262f19184d05d2b

    • SHA1

      ef0a9e5a4aef90a79ae5ba5eaac32420031f3fe6

    • SHA256

      4500ee8bbe7936daa71959aeb183c1c589b3a63ade346614f4863f9e70c471f6

    • SHA512

      82b26d2484fcfe5aa716f16d5eb2d686477646eb60ca202c67c7fcb3c5a569454b7c60ad6d3e75eb9b62c59c30aee360a996f7a81da63ea120c050f884a4c6ec

    • SSDEEP

      3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks