General

  • Target

    905881104c4d1a9db04120bcc0a7b61e

  • Size

    86KB

  • Sample

    240409-yrmtpsgg84

  • MD5

    905881104c4d1a9db04120bcc0a7b61e

  • SHA1

    94f186288bf8a279a586b732d62e86e577197d42

  • SHA256

    3d4c74168dfb4381d5a37e356ebca604d86f4a4b8c0f9f00c408d2b9c9aa20cc

  • SHA512

    11d2be3c6ce46d4817d25a3367f8eeb39e9f7572a3ea60398987989deb89644771b39e2125161fd930accaf81f2ae2298322a3a6044d82516e554d3e66a263be

  • SSDEEP

    1536:fc8Hb7tShpOjB9S/dHs15rkOugsBQTedFpvFl:fJupW9SNwhsBVdFpvFl

Score
7/10

Malware Config

Targets

    • Target

      905881104c4d1a9db04120bcc0a7b61e

    • Size

      86KB

    • MD5

      905881104c4d1a9db04120bcc0a7b61e

    • SHA1

      94f186288bf8a279a586b732d62e86e577197d42

    • SHA256

      3d4c74168dfb4381d5a37e356ebca604d86f4a4b8c0f9f00c408d2b9c9aa20cc

    • SHA512

      11d2be3c6ce46d4817d25a3367f8eeb39e9f7572a3ea60398987989deb89644771b39e2125161fd930accaf81f2ae2298322a3a6044d82516e554d3e66a263be

    • SSDEEP

      1536:fc8Hb7tShpOjB9S/dHs15rkOugsBQTedFpvFl:fJupW9SNwhsBVdFpvFl

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks