General

  • Target

    bffd5c7e95c73589aa2610b1f70d24be

  • Size

    49KB

  • Sample

    240311-getcaada86

  • MD5

    bffd5c7e95c73589aa2610b1f70d24be

  • SHA1

    34d52e893144ce79af9d97633714b8432a9b1f7c

  • SHA256

    a3b84e25c7cdc5685ae786bf3808f698b29cec73f9e758066f72677aeef1d465

  • SHA512

    322e7625906240b633b049e06dcb081788dad0ec02c19b6beaa70458a13e0496662bf139c5be8474a8225ed884405f788b4bdce157072f497025c87a89e7e074

  • SSDEEP

    1536:5o4aFXgIiRSalVEzuDJx8P2EJgXP1EQg:5egN9VYuDoP2VC

Score
7/10

Malware Config

Targets

    • Target

      bffd5c7e95c73589aa2610b1f70d24be

    • Size

      49KB

    • MD5

      bffd5c7e95c73589aa2610b1f70d24be

    • SHA1

      34d52e893144ce79af9d97633714b8432a9b1f7c

    • SHA256

      a3b84e25c7cdc5685ae786bf3808f698b29cec73f9e758066f72677aeef1d465

    • SHA512

      322e7625906240b633b049e06dcb081788dad0ec02c19b6beaa70458a13e0496662bf139c5be8474a8225ed884405f788b4bdce157072f497025c87a89e7e074

    • SSDEEP

      1536:5o4aFXgIiRSalVEzuDJx8P2EJgXP1EQg:5egN9VYuDoP2VC

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks