General

  • Target

    82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057

  • Size

    13.3MB

  • Sample

    240513-h3ygksbh9w

  • MD5

    9290cdfd556ba52252ae3ade5fdbe5ea

  • SHA1

    4f9f60d82465eea4e0941e190a2217d1f82e3f8b

  • SHA256

    82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057

  • SHA512

    4f4fb732c9d22ad0bad91a9f2b4ceb26360c3a8a3cc402928e6c13c266deca0f4003c5ba70951b953e46d07768a660ae19bb38c18613115b8b5781f32b70a88a

  • SSDEEP

    196608:SEZ+85OKrBzHfuDdunOB/i04ofjU9Xd7P6CVYcrf5m/fLuW8yW4aGm/FOCEn4ROy:nk85cfnbnCVHILezjBgC80OfZTtnH

Malware Config

Targets

    • Target

      82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057

    • Size

      13.3MB

    • MD5

      9290cdfd556ba52252ae3ade5fdbe5ea

    • SHA1

      4f9f60d82465eea4e0941e190a2217d1f82e3f8b

    • SHA256

      82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057

    • SHA512

      4f4fb732c9d22ad0bad91a9f2b4ceb26360c3a8a3cc402928e6c13c266deca0f4003c5ba70951b953e46d07768a660ae19bb38c18613115b8b5781f32b70a88a

    • SSDEEP

      196608:SEZ+85OKrBzHfuDdunOB/i04ofjU9Xd7P6CVYcrf5m/fLuW8yW4aGm/FOCEn4ROy:nk85cfnbnCVHILezjBgC80OfZTtnH

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks