Resubmissions

10-10-2023 19:06

231010-xr48baaa72 7

10-10-2023 18:57

231010-xmdvkahh85 7

11-12-2020 07:11

201211-8rk4l8xrye 10

General

  • Target

    107fe810309d392811fb898622aa607c.exe

  • Size

    265KB

  • Sample

    231010-xr48baaa72

  • MD5

    107fe810309d392811fb898622aa607c

  • SHA1

    da82f9894db9b0a9b3cc9565a0c71e3e851cf98b

  • SHA256

    d03c84a13b8e6274f7353fd98e35f73c194938b61690a9a8a83c594a40994dec

  • SHA512

    1def7eff04fac2e9ce8f8f54655ade9640dfe81d0bf957762d173b13ef5d6681ef212418f8fd0e72d0d40fa0d2b0e1c1a3f05805ab0009bf2db3f175cd3d7d84

  • SSDEEP

    1536:vU+AIFt7FeLuMI8Orz99qsOCGMfZovSCC:vU+Aet0aZ3RHovW

Score
7/10

Malware Config

Targets

    • Target

      107fe810309d392811fb898622aa607c.exe

    • Size

      265KB

    • MD5

      107fe810309d392811fb898622aa607c

    • SHA1

      da82f9894db9b0a9b3cc9565a0c71e3e851cf98b

    • SHA256

      d03c84a13b8e6274f7353fd98e35f73c194938b61690a9a8a83c594a40994dec

    • SHA512

      1def7eff04fac2e9ce8f8f54655ade9640dfe81d0bf957762d173b13ef5d6681ef212418f8fd0e72d0d40fa0d2b0e1c1a3f05805ab0009bf2db3f175cd3d7d84

    • SSDEEP

      1536:vU+AIFt7FeLuMI8Orz99qsOCGMfZovSCC:vU+Aet0aZ3RHovW

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks