General

  • Target

    1bf16cf940ac620b76f54235b70a9b67

  • Size

    1.7MB

  • Sample

    231230-zdpltagef2

  • MD5

    1bf16cf940ac620b76f54235b70a9b67

  • SHA1

    94f4d95ccd5e7bf9ab164b39951cd6ca9602a35b

  • SHA256

    114d49aad1fa5782cae105aca32ec974c195c8a7fcf04af52bd0a9964b8b3d24

  • SHA512

    fe57443da0df3d24eb42cf710a33e85231738091b4c72227777b0c2a748cd769eef05ad9857ab294e501b088597ae2be65d5c54cdc805f37099252f38c183778

  • SSDEEP

    49152:dnLvs3wcn8A9Ytmr/E9UetUJV6xQOzuXi0JVnXHqcprJL9:dng3wcPkmr/EVU6xNzCTVacB

Score
7/10

Malware Config

Targets

    • Target

      1bf16cf940ac620b76f54235b70a9b67

    • Size

      1.7MB

    • MD5

      1bf16cf940ac620b76f54235b70a9b67

    • SHA1

      94f4d95ccd5e7bf9ab164b39951cd6ca9602a35b

    • SHA256

      114d49aad1fa5782cae105aca32ec974c195c8a7fcf04af52bd0a9964b8b3d24

    • SHA512

      fe57443da0df3d24eb42cf710a33e85231738091b4c72227777b0c2a748cd769eef05ad9857ab294e501b088597ae2be65d5c54cdc805f37099252f38c183778

    • SSDEEP

      49152:dnLvs3wcn8A9Ytmr/E9UetUJV6xQOzuXi0JVnXHqcprJL9:dng3wcPkmr/EVU6xNzCTVacB

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks