General

  • Target

    6e1f70a4c1de629631545d9367aec365c0b962dc8e09c5d937189fc9f55a47ec

  • Size

    12KB

  • Sample

    240515-29lk5shb5t

  • MD5

    72108d3d739b47036826de38114cec36

  • SHA1

    4398dea1908d4c261a93acc7e54b9fefb18b2bf8

  • SHA256

    6e1f70a4c1de629631545d9367aec365c0b962dc8e09c5d937189fc9f55a47ec

  • SHA512

    63955858fb994217e5608dff612caccfacf87638039a650bcbf2a8ab5f7c0d4a95314ad7e8c23a44ce028603b45723be6234795b8d99cfe353cbda45346d4e12

  • SSDEEP

    384:xL7li/2z4q2DcEQvdQcJKLTp/NK9xaS9:xUMCQ9cS9

Score
7/10

Malware Config

Targets

    • Target

      6e1f70a4c1de629631545d9367aec365c0b962dc8e09c5d937189fc9f55a47ec

    • Size

      12KB

    • MD5

      72108d3d739b47036826de38114cec36

    • SHA1

      4398dea1908d4c261a93acc7e54b9fefb18b2bf8

    • SHA256

      6e1f70a4c1de629631545d9367aec365c0b962dc8e09c5d937189fc9f55a47ec

    • SHA512

      63955858fb994217e5608dff612caccfacf87638039a650bcbf2a8ab5f7c0d4a95314ad7e8c23a44ce028603b45723be6234795b8d99cfe353cbda45346d4e12

    • SSDEEP

      384:xL7li/2z4q2DcEQvdQcJKLTp/NK9xaS9:xUMCQ9cS9

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks