General

  • Target

    unlicense-py3.11-x64.rar

  • Size

    7.4MB

  • Sample

    240314-1496wagg8t

  • MD5

    5253a27c2c6e5feeb0cf233a4dcaeed4

  • SHA1

    215810b90d943a9fa3b05c7652edc22802e523d1

  • SHA256

    6ad90664c6950679e713d4bc80d4622db4583a48964075bd1e78802ae0c421d0

  • SHA512

    a8fb37be21c2939cf2ee21937774261ceaa5788b543a1a75a0750980351be36c4882b88ce39755ab2b8f7d9b64fae2662472a6f9508fd3bcc461abdb654626a4

  • SSDEEP

    196608:12/Rw8P+xttopXs39J5wOrLAGYTUTiUDuN0DkTa84I:12/Rw80L083/OOHAGYTUTLyCot4I

Score
7/10

Malware Config

Targets

    • Target

      unlicense-py3.11-x64.rar

    • Size

      7.4MB

    • MD5

      5253a27c2c6e5feeb0cf233a4dcaeed4

    • SHA1

      215810b90d943a9fa3b05c7652edc22802e523d1

    • SHA256

      6ad90664c6950679e713d4bc80d4622db4583a48964075bd1e78802ae0c421d0

    • SHA512

      a8fb37be21c2939cf2ee21937774261ceaa5788b543a1a75a0750980351be36c4882b88ce39755ab2b8f7d9b64fae2662472a6f9508fd3bcc461abdb654626a4

    • SSDEEP

      196608:12/Rw8P+xttopXs39J5wOrLAGYTUTiUDuN0DkTa84I:12/Rw80L083/OOHAGYTUTLyCot4I

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Enterprise v15

Tasks