General

  • Target

    a3c6f05f56680a14d0c77b943e44e88df61a0e414ab03f3a712aa6964dc31542

  • Size

    770KB

  • Sample

    240513-l9377ahg8w

  • MD5

    b30e83bee9b61212887fdc654bc58d48

  • SHA1

    87711b30500acdf1764af0bf134350ad50e91baa

  • SHA256

    a3c6f05f56680a14d0c77b943e44e88df61a0e414ab03f3a712aa6964dc31542

  • SHA512

    66ed1b0e7e5318db8879d0a44208793037003b6d6cfe79dffb3c00a8bb01416f3fe9ff04c812260c7bfd1ea8ee674d847c55e4828c0b6328f4c9fc99ee7d973b

  • SSDEEP

    24576:O7eit0t9EsyC1XS64DbvYwdzv1n4WwwS6u3sK:O7eimfEsr1X/4wwbn4Wpi

Malware Config

Targets

    • Target

      a3c6f05f56680a14d0c77b943e44e88df61a0e414ab03f3a712aa6964dc31542

    • Size

      770KB

    • MD5

      b30e83bee9b61212887fdc654bc58d48

    • SHA1

      87711b30500acdf1764af0bf134350ad50e91baa

    • SHA256

      a3c6f05f56680a14d0c77b943e44e88df61a0e414ab03f3a712aa6964dc31542

    • SHA512

      66ed1b0e7e5318db8879d0a44208793037003b6d6cfe79dffb3c00a8bb01416f3fe9ff04c812260c7bfd1ea8ee674d847c55e4828c0b6328f4c9fc99ee7d973b

    • SSDEEP

      24576:O7eit0t9EsyC1XS64DbvYwdzv1n4WwwS6u3sK:O7eimfEsr1X/4wwbn4Wpi

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Modifies Windows Firewall

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Registers COM server for autorun

    • Adds Run key to start application

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks