General

  • Target

    dc791ca65c079a5c817d717f3935bb57e960294f2199ea7e5f6b75a477df792e

  • Size

    15.4MB

  • Sample

    240409-skza9sdg5x

  • MD5

    546d52168d730f9e73c5ec2ad736d72e

  • SHA1

    0d05b40db5e023a6d77aaf28c3507bcec2a52fd7

  • SHA256

    dc791ca65c079a5c817d717f3935bb57e960294f2199ea7e5f6b75a477df792e

  • SHA512

    5def168dbd627773cff9d079d0a24a49c1a3a81c16de1537af0cd0f9befb83d44eb27280f0a5cf0106f1d564388cfa564e081feeca8930697e0fb339e5294247

  • SSDEEP

    393216:Y0dyfU0fkZpm+9hNN4fSCkKISCAyTkXfLH+LtKmgipYFJ:Y0dwf8pmK/GISSTkjH+LtKXipYz

Score
7/10

Malware Config

Targets

    • Target

      dc791ca65c079a5c817d717f3935bb57e960294f2199ea7e5f6b75a477df792e

    • Size

      15.4MB

    • MD5

      546d52168d730f9e73c5ec2ad736d72e

    • SHA1

      0d05b40db5e023a6d77aaf28c3507bcec2a52fd7

    • SHA256

      dc791ca65c079a5c817d717f3935bb57e960294f2199ea7e5f6b75a477df792e

    • SHA512

      5def168dbd627773cff9d079d0a24a49c1a3a81c16de1537af0cd0f9befb83d44eb27280f0a5cf0106f1d564388cfa564e081feeca8930697e0fb339e5294247

    • SSDEEP

      393216:Y0dyfU0fkZpm+9hNN4fSCkKISCAyTkXfLH+LtKmgipYFJ:Y0dwf8pmK/GISSTkjH+LtKXipYz

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks