General

  • Target

    ed9aab6c59c6fd8210faadaf583a19a8584a82390ec9ce18b644f0e7a4bb22dd

  • Size

    207KB

  • Sample

    230608-grw9pscg97

  • MD5

    40b33ae566ce2ed579dff697288d5082

  • SHA1

    326974f6d75300f1846ee08f02e2f5f98e0a7298

  • SHA256

    ed9aab6c59c6fd8210faadaf583a19a8584a82390ec9ce18b644f0e7a4bb22dd

  • SHA512

    79bed2e34c9bbe9c5b76386d71b12341531d27ba17e3a8f2c4131bc647b616b31b359fe86f51712af01136eb509de5a97f5447e03b378151e1283e60bcbc82f8

  • SSDEEP

    3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score
7/10

Malware Config

Targets

    • Target

      ed9aab6c59c6fd8210faadaf583a19a8584a82390ec9ce18b644f0e7a4bb22dd

    • Size

      207KB

    • MD5

      40b33ae566ce2ed579dff697288d5082

    • SHA1

      326974f6d75300f1846ee08f02e2f5f98e0a7298

    • SHA256

      ed9aab6c59c6fd8210faadaf583a19a8584a82390ec9ce18b644f0e7a4bb22dd

    • SHA512

      79bed2e34c9bbe9c5b76386d71b12341531d27ba17e3a8f2c4131bc647b616b31b359fe86f51712af01136eb509de5a97f5447e03b378151e1283e60bcbc82f8

    • SSDEEP

      3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks