General

  • Target

    37e716750fc354e799688e3dd440b945

  • Size

    2.1MB

  • Sample

    231225-x58gwscga7

  • MD5

    37e716750fc354e799688e3dd440b945

  • SHA1

    7b5f8e507864412e6daf1e828be1a819e23ccc3d

  • SHA256

    b7e60290efe74a3a1dbec38e2f3ae3242dac829732124164f12240a70232ecf0

  • SHA512

    6d4cac31eb147147b4882c0a6d20b7cb620b24e03945976081efc08ecb9569e9487405f35bd97d01ba6e8d51a60f3ad8af11df39b5fedc5825af530fdca8b505

  • SSDEEP

    49152:pEXqzrcU4GHLabFUcRUjhDFYJYzuAv0ujrUL:G6/cU8bsjhZyYaAPjQL

Score
7/10

Malware Config

Targets

    • Target

      37e716750fc354e799688e3dd440b945

    • Size

      2.1MB

    • MD5

      37e716750fc354e799688e3dd440b945

    • SHA1

      7b5f8e507864412e6daf1e828be1a819e23ccc3d

    • SHA256

      b7e60290efe74a3a1dbec38e2f3ae3242dac829732124164f12240a70232ecf0

    • SHA512

      6d4cac31eb147147b4882c0a6d20b7cb620b24e03945976081efc08ecb9569e9487405f35bd97d01ba6e8d51a60f3ad8af11df39b5fedc5825af530fdca8b505

    • SSDEEP

      49152:pEXqzrcU4GHLabFUcRUjhDFYJYzuAv0ujrUL:G6/cU8bsjhZyYaAPjQL

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks