General

  • Target

    c537619fb84c727902b3f72a81102a5a

  • Size

    484KB

  • Sample

    240313-hc7bssfa4w

  • MD5

    c537619fb84c727902b3f72a81102a5a

  • SHA1

    c0ae3574a5db69d17ff87935b90346cf27fdd41b

  • SHA256

    294737f9ff002e475c66f425784fc48a214029ee1f408cf2de4e442ddb3f17c1

  • SHA512

    4ed1e72047194a27db2e211ceaa5e3a2e810618660f157ad48e61cbd219a759362b2531b978e4140db1a23401cd1cf4dbdc9a0b6147da3b2f0fd93c927f89174

  • SSDEEP

    12288:6XtG/bwdibvjhdaks5j0MLCzITNJdg4NKmXrlR:qgbwduFdakKj0Mdhggf

Score
7/10

Malware Config

Targets

    • Target

      c537619fb84c727902b3f72a81102a5a

    • Size

      484KB

    • MD5

      c537619fb84c727902b3f72a81102a5a

    • SHA1

      c0ae3574a5db69d17ff87935b90346cf27fdd41b

    • SHA256

      294737f9ff002e475c66f425784fc48a214029ee1f408cf2de4e442ddb3f17c1

    • SHA512

      4ed1e72047194a27db2e211ceaa5e3a2e810618660f157ad48e61cbd219a759362b2531b978e4140db1a23401cd1cf4dbdc9a0b6147da3b2f0fd93c927f89174

    • SSDEEP

      12288:6XtG/bwdibvjhdaks5j0MLCzITNJdg4NKmXrlR:qgbwduFdakKj0Mdhggf

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks