General

  • Target

    23ddb437150d42a6dce6f6341d34e5993fc226811f1efea85bb4b5c3dc642e17

  • Size

    118KB

  • Sample

    240419-ydldqadf29

  • MD5

    264a694591ee3019640c85317ebdf4f3

  • SHA1

    953d6b85ab7f11c0032f95daaee7bb10b6a79682

  • SHA256

    23ddb437150d42a6dce6f6341d34e5993fc226811f1efea85bb4b5c3dc642e17

  • SHA512

    a665a2422c769f36db4c49e33b978595e58e40e77c798274304fd53b9cb24a5388ac308c5b94cbc3b3285ebc184da37c9a264107f47a60ead71f421aa04a16e2

  • SSDEEP

    768:VflivXrVKpVhKvtxwYHwVFoeAQimucwUDleL2INeo1CR4bIzydHd6SAr:plqrVKprVuQi+leL2Ioo1CR4GydH8SAr

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    ftp.tripod.com
  • Port:
    21
  • Username:
    onthelinux
  • Password:
    741852abc

Targets

    • Target

      23ddb437150d42a6dce6f6341d34e5993fc226811f1efea85bb4b5c3dc642e17

    • Size

      118KB

    • MD5

      264a694591ee3019640c85317ebdf4f3

    • SHA1

      953d6b85ab7f11c0032f95daaee7bb10b6a79682

    • SHA256

      23ddb437150d42a6dce6f6341d34e5993fc226811f1efea85bb4b5c3dc642e17

    • SHA512

      a665a2422c769f36db4c49e33b978595e58e40e77c798274304fd53b9cb24a5388ac308c5b94cbc3b3285ebc184da37c9a264107f47a60ead71f421aa04a16e2

    • SSDEEP

      768:VflivXrVKpVhKvtxwYHwVFoeAQimucwUDleL2INeo1CR4bIzydHd6SAr:plqrVKprVuQi+leL2Ioo1CR4GydH8SAr

    Score
    10/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks