General

  • Target

    5a592ea3a2168051a53f79f69c88c203

  • Size

    279KB

  • Sample

    240114-fnp6jscebm

  • MD5

    5a592ea3a2168051a53f79f69c88c203

  • SHA1

    ff276b7182fd18973d89b63c604fcf45479cc437

  • SHA256

    af9db7d5831c07bc3baff33c330b4ca9840d6576582295b393a12d32d66e68b3

  • SHA512

    3284dc969d99b5f06a64ac23758a76612a228176a775d5ad324ea1469e9405044b06e22d6232fb3cf83500182debbf4e37eb4f99a00dabf6ac79f99e55ffe385

  • SSDEEP

    6144:LOgNBvg0fjHqZi9d88m+3lRfwNGsKFRGo+yErA31+WkvCHtQNLIe:LfNH8elRfw45QyEA+WkqHiLIe

Score
7/10

Malware Config

Targets

    • Target

      5a592ea3a2168051a53f79f69c88c203

    • Size

      279KB

    • MD5

      5a592ea3a2168051a53f79f69c88c203

    • SHA1

      ff276b7182fd18973d89b63c604fcf45479cc437

    • SHA256

      af9db7d5831c07bc3baff33c330b4ca9840d6576582295b393a12d32d66e68b3

    • SHA512

      3284dc969d99b5f06a64ac23758a76612a228176a775d5ad324ea1469e9405044b06e22d6232fb3cf83500182debbf4e37eb4f99a00dabf6ac79f99e55ffe385

    • SSDEEP

      6144:LOgNBvg0fjHqZi9d88m+3lRfwNGsKFRGo+yErA31+WkvCHtQNLIe:LfNH8elRfw45QyEA+WkqHiLIe

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks