General

  • Target

    a578b6df4879a6ed2bca74299afb6015

  • Size

    124KB

  • Sample

    240226-ff9j8adb92

  • MD5

    a578b6df4879a6ed2bca74299afb6015

  • SHA1

    b89fbb9491b02b29e160b132201e94c06ca7b2a1

  • SHA256

    e838f1dba1ce9cedad4ee3a080cb1d98976b945c8b76763687c27589f75cb1be

  • SHA512

    3e29c107ba9aa085a0c551b9d49a6dc789f40e244d7184c3313f08e966f013a44e93dc39e50ae4ae8b190629dc6baf8fde0d289d6361e61cfa9cd53c608f26dd

  • SSDEEP

    1536:IT23KSUCoqtjDHGxcGsZK1G5NYFBxNLNE2CLuFFVlRuiHCrnzK3PlB:HECo0DmPsI1GoBxNB0LuFFIiiryNB

Score
8/10

Malware Config

Targets

    • Target

      a578b6df4879a6ed2bca74299afb6015

    • Size

      124KB

    • MD5

      a578b6df4879a6ed2bca74299afb6015

    • SHA1

      b89fbb9491b02b29e160b132201e94c06ca7b2a1

    • SHA256

      e838f1dba1ce9cedad4ee3a080cb1d98976b945c8b76763687c27589f75cb1be

    • SHA512

      3e29c107ba9aa085a0c551b9d49a6dc789f40e244d7184c3313f08e966f013a44e93dc39e50ae4ae8b190629dc6baf8fde0d289d6361e61cfa9cd53c608f26dd

    • SSDEEP

      1536:IT23KSUCoqtjDHGxcGsZK1G5NYFBxNLNE2CLuFFVlRuiHCrnzK3PlB:HECo0DmPsI1GoBxNB0LuFFIiiryNB

    Score
    8/10
    • Possible privilege escalation attempt

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Modifies file permissions

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks