General

  • Target

    Swift Copy.scr.exe

  • Size

    883KB

  • Sample

    240313-qe9tpsdf61

  • MD5

    4e67c14112dfea946256c56695b85b06

  • SHA1

    d2836d2fd3f1a23da0aacca6e8c94e0d22820a50

  • SHA256

    ba4e91818b6dd6baa9c8465feaf72c0de6b50f884df80ae72de722c21096ff32

  • SHA512

    9106edd843a2efe7cdcc7a508634e73874be6aa7f6cdf3ab113ea9a0536f8297abf70911ab572aa60a11dcea4ab24c4bca6830709cae45147c6af961e49b917f

  • SSDEEP

    24576:JksxENl6bP9Ra9gU3cRlTv07ye7PYHC+HFJGJWYKBKeGp:JkmENl6bPO9gU3cR76y1OJhEKX

Score
7/10

Malware Config

Targets

    • Target

      Swift Copy.scr.exe

    • Size

      883KB

    • MD5

      4e67c14112dfea946256c56695b85b06

    • SHA1

      d2836d2fd3f1a23da0aacca6e8c94e0d22820a50

    • SHA256

      ba4e91818b6dd6baa9c8465feaf72c0de6b50f884df80ae72de722c21096ff32

    • SHA512

      9106edd843a2efe7cdcc7a508634e73874be6aa7f6cdf3ab113ea9a0536f8297abf70911ab572aa60a11dcea4ab24c4bca6830709cae45147c6af961e49b917f

    • SSDEEP

      24576:JksxENl6bP9Ra9gU3cRlTv07ye7PYHC+HFJGJWYKBKeGp:JkmENl6bPO9gU3cR76y1OJhEKX

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks