General

  • Target

    450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25

  • Size

    1.4MB

  • Sample

    231010-n72yfsdc6t

  • MD5

    6cb6f00e10402d1cdcbee1d1a1094e79

  • SHA1

    a7ac8988aa8554ddfb7b3ad707c0aee83f8a5df3

  • SHA256

    450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25

  • SHA512

    69617b593801508a6a243d15b289b7407babf0aa09b0ba960f40c83b08ae699054a062f5c6430091c871da424ac7cadf2014c47139548d53cbe0994aff6c4d09

  • SSDEEP

    24576:vv8K9hcxXwcUlINc6iZOmmdLBR92w0WqXJJ15XncyTdiG0KtYrEH73:8KzcxXMiNc7SpFS1Bjiof

Malware Config

Targets

    • Target

      450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25

    • Size

      1.4MB

    • MD5

      6cb6f00e10402d1cdcbee1d1a1094e79

    • SHA1

      a7ac8988aa8554ddfb7b3ad707c0aee83f8a5df3

    • SHA256

      450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25

    • SHA512

      69617b593801508a6a243d15b289b7407babf0aa09b0ba960f40c83b08ae699054a062f5c6430091c871da424ac7cadf2014c47139548d53cbe0994aff6c4d09

    • SSDEEP

      24576:vv8K9hcxXwcUlINc6iZOmmdLBR92w0WqXJJ15XncyTdiG0KtYrEH73:8KzcxXMiNc7SpFS1Bjiof

    • Downloads MZ/PE file

    • Modifies AppInit DLL entries

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks