General

  • Target

    377c038db8d5bdbe9c2fba4d40f19a45

  • Size

    44KB

  • Sample

    231231-qf4zvagfdj

  • MD5

    377c038db8d5bdbe9c2fba4d40f19a45

  • SHA1

    49854a4840fc6f3b7bbd7edbae62817e3b9b5ed6

  • SHA256

    31563ccceb710f65c18cc814262917cf5e56a95d7ff7c99b9161d8ac86df2aa8

  • SHA512

    3167ba60e36087155a3d8808d5798d738f7369875498ddc5fb99858674f7fcc306a6a026a7d0e72d80e39475a9a39f4984437ed558d8bf32f934cf0e2b4cb15f

  • SSDEEP

    384:/TF150eWM4NDvwC52skUka4OfvXO81GegGqNfgD0kV5PzPQPZeb5yD946SqKDbKY:/+eWJTwsYvIPrE/VpyFHLoheloy6Sj

Score
8/10

Malware Config

Targets

    • Target

      377c038db8d5bdbe9c2fba4d40f19a45

    • Size

      44KB

    • MD5

      377c038db8d5bdbe9c2fba4d40f19a45

    • SHA1

      49854a4840fc6f3b7bbd7edbae62817e3b9b5ed6

    • SHA256

      31563ccceb710f65c18cc814262917cf5e56a95d7ff7c99b9161d8ac86df2aa8

    • SHA512

      3167ba60e36087155a3d8808d5798d738f7369875498ddc5fb99858674f7fcc306a6a026a7d0e72d80e39475a9a39f4984437ed558d8bf32f934cf0e2b4cb15f

    • SSDEEP

      384:/TF150eWM4NDvwC52skUka4OfvXO81GegGqNfgD0kV5PzPQPZeb5yD946SqKDbKY:/+eWJTwsYvIPrE/VpyFHLoheloy6Sj

    Score
    8/10
    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks