General

  • Target

    IQXO.zip

  • Size

    27KB

  • Sample

    231212-r1bpgaefar

  • MD5

    d8126a31a1fdfc29eb2c0031db1c5bfc

  • SHA1

    1e001142dc4e44ff2cf2eb0db40e0797f3ef6d8f

  • SHA256

    4a6d8020b61623b5a13a4fc27c5de1d1ae71c56b456b9646e1c5711f94caab82

  • SHA512

    63043948393e9214f44245ca416bdab9bb2c3a634ea4687b179e51f3f3773aa6a87d1747150b05e7e734260c437f354486dbf745abc6dbc92f7a42eb000bf7fb

  • SSDEEP

    768:GUMbqaMksN/2NyOE+Mpyit0moh9CX6O30yap:ibqaMkG/wyObi2Fhy6O3gp

Score
8/10

Malware Config

Targets

    • Target

      Noteeb.js

    • Size

      79KB

    • MD5

      8ff33e1d1f20a1be265bd996c00d1463

    • SHA1

      d01ff951755e8f2c8f9a3e3697cd3cc1e0ffae4d

    • SHA256

      2dde87c739be776f15f4f269d527e3ab96429a2947c8e9cd8a51e39050ffe73a

    • SHA512

      3663e9e29f73f380d6bfd2e6bd851620a100a1a8997a05df57b599f336f601e95f201cf18417fa4f5088c8a787b41af6ea5eb9a313697239e99f0f8f63245051

    • SSDEEP

      1536:SepX4w2rWvddsQs2/HlAB7gKLQGwWAcViP0vW7c3Go:SoIYAUgxW7c3Go

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v15

Tasks