Resubmissions

24-08-2024 06:40

240824-hfkl7szckl 7

24-08-2024 06:40

240824-hfjpxaxgmd 7

24-08-2024 06:40

240824-hfjd5szckj 7

24-08-2024 06:40

240824-hfhgvaxglh 7

24-08-2024 06:40

240824-hfgwbazcjr 7

24-08-2024 06:40

240824-hff9sazcjq 7

24-08-2024 06:40

240824-hffm9axglf 7

24-08-2024 06:40

240824-hffcgsxgld 7

24-08-2024 06:40

240824-hfeqyszcjm 7

24-08-2024 06:40

240824-hfd5esxglb 9

General

  • Target

    medium.exe

  • Size

    161.8MB

  • Sample

    240509-jcxyssaf72

  • MD5

    a73078cd2e2658a9d07a5b1fc621662c

  • SHA1

    d0744aa1ac103b357aac798c72dd5f42492ede75

  • SHA256

    335d7d67678ff4475ee0622beef67a923e4962a034ce7ca97d6b08d9c119a3eb

  • SHA512

    ced6b6a5cad2605121255e158bee189663adaf62f6d2c77572b54b43c39af0812ebcc1c5adec2dbfcef774af5f9801aa7afd5e277b53ff3b0bf92dbc16229805

  • SSDEEP

    3145728:CNU5azpUaH5sLtzPVggXepw/V0s9AcjnDiBOEA+XnNOr1XW4TcIxaya/ZL:CbsLtzPmgAKWs9XjnDiBLAUnNOr1XW4c

Malware Config

Targets

    • Target

      medium.exe

    • Size

      161.8MB

    • MD5

      a73078cd2e2658a9d07a5b1fc621662c

    • SHA1

      d0744aa1ac103b357aac798c72dd5f42492ede75

    • SHA256

      335d7d67678ff4475ee0622beef67a923e4962a034ce7ca97d6b08d9c119a3eb

    • SHA512

      ced6b6a5cad2605121255e158bee189663adaf62f6d2c77572b54b43c39af0812ebcc1c5adec2dbfcef774af5f9801aa7afd5e277b53ff3b0bf92dbc16229805

    • SSDEEP

      3145728:CNU5azpUaH5sLtzPVggXepw/V0s9AcjnDiBOEA+XnNOr1XW4TcIxaya/ZL:CbsLtzPmgAKWs9XjnDiBLAUnNOr1XW4c

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks