General

  • Target

    ae57b283f12fa51ca0ecabd2ca63ffe3

  • Size

    1.5MB

  • Sample

    240229-mz16hseg31

  • MD5

    ae57b283f12fa51ca0ecabd2ca63ffe3

  • SHA1

    dbf8fcf96c66b53cb8a9b0996fb5a209372c722b

  • SHA256

    29d988c52e0bb1675c202f154885580f7d5235d1ca34dcda2fbab7f876333ed5

  • SHA512

    72e6ecf61d9906fa054e15e8930413003e7c8843ac69d2c24ed0487c03307bdfef038fbedb40cb8cabed1c1844738d557f2871de1b9422dcc40b0936650c4b8f

  • SSDEEP

    24576:BLGQjsCl8VFFQmwz5a7T+gfE4i4lBlIMRqUcipfXVaLoHSj8feL5oXyIiZn:B9EVHfwY7TpT5IMRL9ZsoY82qXnC

Score
8/10

Malware Config

Targets

    • Target

      ae57b283f12fa51ca0ecabd2ca63ffe3

    • Size

      1.5MB

    • MD5

      ae57b283f12fa51ca0ecabd2ca63ffe3

    • SHA1

      dbf8fcf96c66b53cb8a9b0996fb5a209372c722b

    • SHA256

      29d988c52e0bb1675c202f154885580f7d5235d1ca34dcda2fbab7f876333ed5

    • SHA512

      72e6ecf61d9906fa054e15e8930413003e7c8843ac69d2c24ed0487c03307bdfef038fbedb40cb8cabed1c1844738d557f2871de1b9422dcc40b0936650c4b8f

    • SSDEEP

      24576:BLGQjsCl8VFFQmwz5a7T+gfE4i4lBlIMRqUcipfXVaLoHSj8feL5oXyIiZn:B9EVHfwY7TpT5IMRL9ZsoY82qXnC

    Score
    8/10
    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks