General

  • Target

    078fc59aea233c9c2bf09460a63a395b

  • Size

    124KB

  • Sample

    231229-3vysladeh2

  • MD5

    078fc59aea233c9c2bf09460a63a395b

  • SHA1

    a3b070891de772c34c05c2e74e1a00b535b5e024

  • SHA256

    ecde594db524e9418daaae9918ce31eaa57b9690b181210560ef91e4468561c6

  • SHA512

    e4a19e97b1d08b1006031970bc334e96439f54b30d089b2c7baff6111b8640559df801e3288bb37a57931272cd4111c8a84f4fc5fed1eef04f47cd47a0231dcd

  • SSDEEP

    1536:UubUEFbQnQ/67NxkiQixA+alh98r8Y9USv1jyPwo7JaS1:TbUEFsnQ/67gjH8ri8iwQL

Score
10/10

Malware Config

Targets

    • Target

      078fc59aea233c9c2bf09460a63a395b

    • Size

      124KB

    • MD5

      078fc59aea233c9c2bf09460a63a395b

    • SHA1

      a3b070891de772c34c05c2e74e1a00b535b5e024

    • SHA256

      ecde594db524e9418daaae9918ce31eaa57b9690b181210560ef91e4468561c6

    • SHA512

      e4a19e97b1d08b1006031970bc334e96439f54b30d089b2c7baff6111b8640559df801e3288bb37a57931272cd4111c8a84f4fc5fed1eef04f47cd47a0231dcd

    • SSDEEP

      1536:UubUEFbQnQ/67NxkiQixA+alh98r8Y9USv1jyPwo7JaS1:TbUEFsnQ/67gjH8ri8iwQL

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks