General

  • Target

    fcaf523ce3f77184e129f37d2b09554e2df337e7111e6e04dc603f24617e86ae

  • Size

    88KB

  • Sample

    230718-e9588agc88

  • MD5

    77a5de0d15588d8a0519f9bd3724d289

  • SHA1

    ed58a11bb39f4bc982cb357b1e9faf5753c0c6ee

  • SHA256

    fcaf523ce3f77184e129f37d2b09554e2df337e7111e6e04dc603f24617e86ae

  • SHA512

    a952cf05326ae6d6b492af588fd518f39d2d5fd34f94e7f5d889a38f3908f3deaa80a11925319f10fc0f14c4fef07e94705ffa165561a2d437165aa46fc60670

  • SSDEEP

    1536:I+7+BweyTmf4fya0+YY4sr8i0D4iEC7ANVppi41tgtshsN3vQc:H+BweyTmf4fyaQ5sr8i0DC16vR

Score
10/10

Malware Config

Targets

    • Target

      fcaf523ce3f77184e129f37d2b09554e2df337e7111e6e04dc603f24617e86ae

    • Size

      88KB

    • MD5

      77a5de0d15588d8a0519f9bd3724d289

    • SHA1

      ed58a11bb39f4bc982cb357b1e9faf5753c0c6ee

    • SHA256

      fcaf523ce3f77184e129f37d2b09554e2df337e7111e6e04dc603f24617e86ae

    • SHA512

      a952cf05326ae6d6b492af588fd518f39d2d5fd34f94e7f5d889a38f3908f3deaa80a11925319f10fc0f14c4fef07e94705ffa165561a2d437165aa46fc60670

    • SSDEEP

      1536:I+7+BweyTmf4fya0+YY4sr8i0D4iEC7ANVppi41tgtshsN3vQc:H+BweyTmf4fyaQ5sr8i0DC16vR

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies Installed Components in the registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks