Resubmissions

07/10/2023, 17:34

231007-v5xdhseb4w 8

07/10/2023, 17:33

231007-v4xynaeb3z 3

07/10/2023, 17:30

231007-v26g1sgd97 8

07/10/2023, 17:26

231007-v1c43sgd85 3

General

  • Target

    descarga.png

  • Size

    2KB

  • Sample

    231007-v5xdhseb4w

  • MD5

    7a1e8a6af5caafd9e44894912d94428d

  • SHA1

    c2346f9df9c15a644c8173f6bb4dd3c7d0c0a344

  • SHA256

    e36a81ca188eb82f0d45a6ed3a1db5d47a5a7590c57e54408710513d27e34ed3

  • SHA512

    79c5dacbed15ffd0241504beec03f80415b1723d50eca2a326584ebb47360ccd2f7d6348554dbba7c7103cb8541101174b4fb7b324c116186c58581f48bfe2f2

Score
8/10

Malware Config

Targets

    • Target

      descarga.png

    • Size

      2KB

    • MD5

      7a1e8a6af5caafd9e44894912d94428d

    • SHA1

      c2346f9df9c15a644c8173f6bb4dd3c7d0c0a344

    • SHA256

      e36a81ca188eb82f0d45a6ed3a1db5d47a5a7590c57e54408710513d27e34ed3

    • SHA512

      79c5dacbed15ffd0241504beec03f80415b1723d50eca2a326584ebb47360ccd2f7d6348554dbba7c7103cb8541101174b4fb7b324c116186c58581f48bfe2f2

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks