Resubmissions

24-04-2024 03:52

240424-efbgraef5w 10

24-04-2024 03:51

240424-eegblsef43 7

General

  • Target

    16819576831.zip

  • Size

    258KB

  • Sample

    240424-eegblsef43

  • MD5

    e1cb33520f6a08fc9bce7e18478efde8

  • SHA1

    c78ae7436a57fffcf4027fe813b985af674a589d

  • SHA256

    d7359087273f249cce6c01e7a0fb0a80f296b33b112841061534670211d69c37

  • SHA512

    e32768ca8a99b6d71933bec499c070000147bcd569ab8d0b04c54f657c16dedfe7d08d8984382ae0d5d8becc4a77ef9e9a9f40f1481b244a31e3b965899cf705

  • SSDEEP

    6144:YokWFVc4JZjNwT3aKo+95cbjedZWIIASpIDgJ7p///2KRlr5/ugC4F17lnJRzttX:YoLfXKjR9+bqdZ92FeKRlr5/ugCGdltB

Score
7/10

Malware Config

Targets

    • Target

      68430c6b95cc97d1966b7d01bfb775d9e4441517218022b10beaccb503fbb2ce

    • Size

      353KB

    • MD5

      2853535ed2edfdb3ad9e483a03c8c571

    • SHA1

      8c734ea52b0157f2870f48709ce296adb6a2cb91

    • SHA256

      68430c6b95cc97d1966b7d01bfb775d9e4441517218022b10beaccb503fbb2ce

    • SHA512

      2661cb2c77aa73e4526f556744ecaacd477020cb82f54aee53370e68a092d6d90f3d963fb67863cf8731ac34c74a5979e7d9fe35d8823034448ea2a7a3504a06

    • SSDEEP

      6144:LUyAMK8QlV6x+SN+B23sY7PAJT4N6DyHRbIuptrinxKvNFgRPlBuVnkOZO:LUyzN++7PaQxrqxUgRPlwVkO

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies file permissions

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks