General

  • Target

    4f1cd9820b6bafb17835612efba5962fec719c834e81bf8670bac8cf88fbc173

  • Size

    897KB

  • Sample

    240425-cmyjradd89

  • MD5

    25699abc4d91308d4e36f94ca00fb778

  • SHA1

    32719790d144de95232c3a0422a1862534697911

  • SHA256

    4f1cd9820b6bafb17835612efba5962fec719c834e81bf8670bac8cf88fbc173

  • SHA512

    20ff63472baa102dc89422c3ad87fabcba29fada077318a57fbace81f2358d9f2aa47f7b950a9b8b122eae2411570d7813535d7b3ddf576bbb2cf18f59c33d77

  • SSDEEP

    12288:AqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaZTS:AqDEvCTbMWu7rQYlBQcBiT6rprG8adS

Score
10/10

Malware Config

Targets

    • Target

      4f1cd9820b6bafb17835612efba5962fec719c834e81bf8670bac8cf88fbc173

    • Size

      897KB

    • MD5

      25699abc4d91308d4e36f94ca00fb778

    • SHA1

      32719790d144de95232c3a0422a1862534697911

    • SHA256

      4f1cd9820b6bafb17835612efba5962fec719c834e81bf8670bac8cf88fbc173

    • SHA512

      20ff63472baa102dc89422c3ad87fabcba29fada077318a57fbace81f2358d9f2aa47f7b950a9b8b122eae2411570d7813535d7b3ddf576bbb2cf18f59c33d77

    • SSDEEP

      12288:AqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgaZTS:AqDEvCTbMWu7rQYlBQcBiT6rprG8adS

    Score
    10/10
    • Detected google phishing page

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks