Resubmissions

18-04-2024 05:22

240418-f2z8nscc74 10

18-04-2024 05:22

240418-f2njwade8w 10

18-04-2024 05:21

240418-f2gfkade8s 7

18-04-2024 05:21

240418-f2csdacc53 10

18-04-2024 05:21

240418-f2b6vade7x 7

General

  • Target

    d351ac17dc0d9476ef029484a165f99e258f546bba2d619b1c6485cb8875ac7a

  • Size

    371KB

  • Sample

    240418-f2b6vade7x

  • MD5

    bb8cd5df2be7e8bcc5be439675b3d0a2

  • SHA1

    627ac60f64974d5caaf81c2de8ca0977c91f4219

  • SHA256

    d351ac17dc0d9476ef029484a165f99e258f546bba2d619b1c6485cb8875ac7a

  • SHA512

    57031eb7d7b2c27d7ecacdc085d07065ced46a742128f9818f62c9fe6633c31aa8eb20ffc52c8415613787946060f5a6b5adf8b977d5ca4fed9656233ebd9cfa

  • SSDEEP

    6144:tnzQnu/cmM1oSigOQT2F8U92Iu7DMVQZhWLvLRXdYX9ji+uhi2PsrhY:hzQnkM1oSiBGI8bxn5m6i+uo20tY

Score
7/10

Malware Config

Targets

    • Target

      d351ac17dc0d9476ef029484a165f99e258f546bba2d619b1c6485cb8875ac7a

    • Size

      371KB

    • MD5

      bb8cd5df2be7e8bcc5be439675b3d0a2

    • SHA1

      627ac60f64974d5caaf81c2de8ca0977c91f4219

    • SHA256

      d351ac17dc0d9476ef029484a165f99e258f546bba2d619b1c6485cb8875ac7a

    • SHA512

      57031eb7d7b2c27d7ecacdc085d07065ced46a742128f9818f62c9fe6633c31aa8eb20ffc52c8415613787946060f5a6b5adf8b977d5ca4fed9656233ebd9cfa

    • SSDEEP

      6144:tnzQnu/cmM1oSigOQT2F8U92Iu7DMVQZhWLvLRXdYX9ji+uhi2PsrhY:hzQnkM1oSiBGI8bxn5m6i+uo20tY

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

MITRE ATT&CK Enterprise v15

Tasks