General

  • Target

    Koalageddon-2.0.1.msi

  • Size

    46.4MB

  • Sample

    231030-te7k5afh44

  • MD5

    155295f8dbaae190dd34adadecfb302e

  • SHA1

    c720229eb480dadd40649a2447b3e618a83d568c

  • SHA256

    793a6b5980872bc0c16c53ee550f860b90e8955fbbf2f0bd15734e05e9b4c3b8

  • SHA512

    cd6d4405bf387faa538426a2cfefdecd4c7f3a649f4cfce1eab85cea22a345f304525d222a48785528b7e19f83b76a536a1895e3f32ea8153d93ddae29850dd7

  • SSDEEP

    786432:EdQiEpqgLHk81Ywf/9gK7rhd8cHcSQAw8Luh1CKGSsKN4PgGagUiNaLFRB3p/n4U:GXEvE81vCjSE8yhAc1TgUiNaLFRdlx0e

Score
7/10

Malware Config

Targets

    • Target

      Koalageddon-2.0.1.msi

    • Size

      46.4MB

    • MD5

      155295f8dbaae190dd34adadecfb302e

    • SHA1

      c720229eb480dadd40649a2447b3e618a83d568c

    • SHA256

      793a6b5980872bc0c16c53ee550f860b90e8955fbbf2f0bd15734e05e9b4c3b8

    • SHA512

      cd6d4405bf387faa538426a2cfefdecd4c7f3a649f4cfce1eab85cea22a345f304525d222a48785528b7e19f83b76a536a1895e3f32ea8153d93ddae29850dd7

    • SSDEEP

      786432:EdQiEpqgLHk81Ywf/9gK7rhd8cHcSQAw8Luh1CKGSsKN4PgGagUiNaLFRB3p/n4U:GXEvE81vCjSE8yhAc1TgUiNaLFRdlx0e

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks