General

  • Target

    MacmillanEducationStudent-win32-x64.exe

  • Size

    110.3MB

  • Sample

    231011-t59s6sad2v

  • MD5

    2f22b2ab08eba96b0362ca0266097a03

  • SHA1

    79eca25f10059018fcde6853a736436a95ef7032

  • SHA256

    62141cce744cc481f21c066c558befe021025ff9f1fc9b0b4a0ee3976d2d3254

  • SHA512

    1633d6e99242703b597721da65ab95a1e4567e7ec90a329570cedfa988ad35293c29b033d74253c4e2934c57d36314123450dae99eac2f8d30994448eba6adb7

  • SSDEEP

    3145728:jtlNLyoIgL3ppIFcMp8H1K9JImbHD3t44oif48ZR/wOI:plNmCH+1JNbj3t44/fPR/

Score
6/10

Malware Config

Targets

    • Target

      MacmillanEducationStudent-win32-x64.exe

    • Size

      110.3MB

    • MD5

      2f22b2ab08eba96b0362ca0266097a03

    • SHA1

      79eca25f10059018fcde6853a736436a95ef7032

    • SHA256

      62141cce744cc481f21c066c558befe021025ff9f1fc9b0b4a0ee3976d2d3254

    • SHA512

      1633d6e99242703b597721da65ab95a1e4567e7ec90a329570cedfa988ad35293c29b033d74253c4e2934c57d36314123450dae99eac2f8d30994448eba6adb7

    • SSDEEP

      3145728:jtlNLyoIgL3ppIFcMp8H1K9JImbHD3t44oif48ZR/wOI:plNmCH+1JNbj3t44/fPR/

    Score
    6/10
    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks