General

  • Target

    e45e42c1a8068509e2689a970977b991da66c7dfb480c7bb4b7faad54ffdb05a

  • Size

    628KB

  • Sample

    231127-tgqemahf8t

  • MD5

    625cd68285d45b23bb36b04f43c251f4

  • SHA1

    4d74b409e480cfb1126fe06b7cf9c51920169a81

  • SHA256

    e45e42c1a8068509e2689a970977b991da66c7dfb480c7bb4b7faad54ffdb05a

  • SHA512

    4fcb9a187e79f0de9138469803ea454ae3b295374460f8ac3bc7031b794bfe5bb57744544c300fb5ac6f8f49e1293ea4224c6ed48f02e8a224beaeccf2082b30

  • SSDEEP

    12288:duJruZ7MG89TIF3284F59x8pqzFjIYdTdoRH7znQqGsttAj6ssOLgwCmavrmdW3d:duMCfTVN9xlziYTePnJGstMVsOtCmaCs

Score
7/10

Malware Config

Targets

    • Target

      BL-SEF2006-23.exe

    • Size

      686KB

    • MD5

      b081fab608509172e6484432dcf52dc8

    • SHA1

      ae240cfb577b8cb74ed261bf68d28d55c3f3c6e0

    • SHA256

      1d01aa73e8e852057bd5148ec1db61e2ca6bc11aeeaf10f54e292d6e68a4e76b

    • SHA512

      d927e86f66262f262db5696fcffb4831c62588d37d2e8477b028c4fa20a27f86e2726488852e639d880e0d93b9987fef0c2cb52f658b4fab2dcec89b305af560

    • SSDEEP

      12288:0aoOid7BR6wTuH7TIH32Q4F59x8FqzFj0YlTdARTpzJKGGitVMj6suOlgWCma73Q:07OipBCTlx9xDz6YbG1JFGitMVuOTCmd

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks