General

  • Target

    d9928906da1b4c4c9be9591cdcc6667e

  • Size

    298KB

  • Sample

    240409-3ke8hadf4y

  • MD5

    d9928906da1b4c4c9be9591cdcc6667e

  • SHA1

    10334080d54808af5feec2933c7a608a1ef1292b

  • SHA256

    24df359c9aeeee7eef5f38546f048ab7ad5a379ea8ef64b4cc45234fd5477c87

  • SHA512

    309ebce2b92d8b948b818048254018cfa4fcb2a96621ccf618939c7436308a54789090f3b828fa55ca32a92f11f2685273d9db78032f4f0000e98537ede2d706

  • SSDEEP

    1536:iwQBHSonUWjzlZLXf4QJpUT0mSBAgapetc8o/Kdgo1QGuG3gyh1nu:iBlSRWjzrLXQQJKgmSBAVpet2Ago1ls

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      d9928906da1b4c4c9be9591cdcc6667e

    • Size

      298KB

    • MD5

      d9928906da1b4c4c9be9591cdcc6667e

    • SHA1

      10334080d54808af5feec2933c7a608a1ef1292b

    • SHA256

      24df359c9aeeee7eef5f38546f048ab7ad5a379ea8ef64b4cc45234fd5477c87

    • SHA512

      309ebce2b92d8b948b818048254018cfa4fcb2a96621ccf618939c7436308a54789090f3b828fa55ca32a92f11f2685273d9db78032f4f0000e98537ede2d706

    • SSDEEP

      1536:iwQBHSonUWjzlZLXf4QJpUT0mSBAgapetc8o/Kdgo1QGuG3gyh1nu:iBlSRWjzrLXQQJKgmSBAVpet2Ago1ls

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks