Resubmissions

26-06-2023 15:36

230626-s1ydxabc2s 8

26-06-2023 14:10

230626-rg4wxaaa65 8

General

  • Target

    June26th_Document_2023.zip

  • Size

    206KB

  • Sample

    230626-rg4wxaaa65

  • MD5

    52ff329adf598e75d9e005609150a67a

  • SHA1

    49770b1b159a56549c69cceda7472de03ed19d85

  • SHA256

    b7aa9a7e7956a2be2fddf860f40d1e26e87c1b0b12a0ff7723445b4b7eea0810

  • SHA512

    97fd8c2a46524523025e8c92e3d998fb412fd06fd2c015eb712a230c81732362fe5c2359a4ee7f2f75cdfea89ba4ef8dd467d2db0119bf1da7a4cc9b29ace05f

  • SSDEEP

    6144:ssp6EvVJUvM/grTt2WEoqdpVF7NNk6s06ta:KEvjUvM/8tGoqPVFLD/6w

Score
8/10

Malware Config

Targets

    • Target

      June26th_Document_2023.js

    • Size

      873KB

    • MD5

      54187639d9027e6c3040367bcd69141a

    • SHA1

      85d1274413c026b102dd6e6ddddea6ab8a399c00

    • SHA256

      58d23b1de893e0fed73b8dcb80fcb2f5eb14359970ac35cc4ef0582dd1889134

    • SHA512

      ebef7df4649b83dc34e9004a764a2995d7a5ffecdaed43c0b93bbb20302083260211373561861eb44d14f28986a97315c3ab23b8332e61f410ed049bc536736e

    • SSDEEP

      24576:Vz1cgkPL8Kon29iRvE0azoX4Cpb2FiFRoxfhqAq8hPXJI9a:h1cgkPL8Kon29iRvE0azoX4HFiFRoxf3

    Score
    8/10
    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks