General

  • Target

    Setup.exe (7).7z

  • Size

    71KB

  • Sample

    230614-t5x5dabd93

  • MD5

    91ac6b612ea4a0b8b39a27a0d214ead8

  • SHA1

    9e7aa80dd90051cf221bb231b95b11b5ba9cc2af

  • SHA256

    84ae00d2fcc746a46bf7e2438d76a41fc44c1a977480d0fb79bd75068ffbee0b

  • SHA512

    c9b1160c7716cb1d9fd9216618c170ef8083238e772682c8fb74654f8fd3683816f64628590bc252b3db50de678d9b28a17044f1ea53c242aa1476e3427b90e4

  • SSDEEP

    1536:rLPSRaRko3ZmmdW3IaNoAjzUoCBTBQrm3pwnVG9h47SoU4z9E0q6:rLGOnmB3IkhyTBQfnGh43a0

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      106KB

    • MD5

      acf14c477ec9866b9dd67327b58511b9

    • SHA1

      5e379f9c38763dd302071e39359b485112be7650

    • SHA256

      27f42a8c69d66721170a26697cd86b6013e31a7b94b0db8c9e6f427d647b8b5b

    • SHA512

      98ea43411bf43e40bc41a69fa51a7a9dae9f29073bb930f60065406e3b5fbef08287491dd27b26c6160ef1fd6695666b5faa018b5cc0c230605d03ecf081c744

    • SSDEEP

      1536:z/T2X/jN2vxZz0DTHUpou4JezAaBxE+1zyYCDtpXOr9m5+HMVKN578+Px2:zbG7N2kDTHUpouOnOPzy5n+7bvlx2

    • Downloads MZ/PE file

    • Adds Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks