General

  • Target

    d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194.lnk

  • Size

    2KB

  • Sample

    240229-gm2nmagd3s

  • MD5

    7aedf8f8a11a97880b16544588f15683

  • SHA1

    a31781401cc7dac39e62d4812c17cf96f889d350

  • SHA256

    d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194

  • SHA512

    db9be41e532757c4e5cb0cc1a8630000718aeb50bce2c4fa937861f445d4e9f35478e64b78fd273c09ae6fe45e8e4c6a3c5f3600e1948cca23137b90f5ecf14c

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

https://thanhancompany.com/grip/FYI

Extracted

Language
hta
Source
URLs
hta.dropper

https://thanhancompany.com/grip/FYI

Targets

    • Target

      d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194.lnk

    • Size

      2KB

    • MD5

      7aedf8f8a11a97880b16544588f15683

    • SHA1

      a31781401cc7dac39e62d4812c17cf96f889d350

    • SHA256

      d8dbb40faf7b8585dc9963d2addf23d922c517623a24770e42f91dbe58975194

    • SHA512

      db9be41e532757c4e5cb0cc1a8630000718aeb50bce2c4fa937861f445d4e9f35478e64b78fd273c09ae6fe45e8e4c6a3c5f3600e1948cca23137b90f5ecf14c

    Score
    10/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks