General

  • Target

    9921b49b66422641632d0e269e25addf9cf18e9348bbd8f311413d4c91373091

  • Size

    12KB

  • Sample

    240517-b82ymaca83

  • MD5

    00cc838411c26d674b0e50faa12c71c5

  • SHA1

    45d5f03c6cd108538438e2658b73b1348b25ee5b

  • SHA256

    9921b49b66422641632d0e269e25addf9cf18e9348bbd8f311413d4c91373091

  • SHA512

    f05cb3892b51266956d6b0e1ae3725b32054c38d31043406d30f8276281591d08c143a97a1123f590a863efd70e1b5016ca348d2d5d343f3a3a885a92a11738b

  • SSDEEP

    384:UL7li/2zYq2DcEQvdQcJKLTp/NK9xaSK:CEMCQ9cSK

Score
7/10

Malware Config

Targets

    • Target

      9921b49b66422641632d0e269e25addf9cf18e9348bbd8f311413d4c91373091

    • Size

      12KB

    • MD5

      00cc838411c26d674b0e50faa12c71c5

    • SHA1

      45d5f03c6cd108538438e2658b73b1348b25ee5b

    • SHA256

      9921b49b66422641632d0e269e25addf9cf18e9348bbd8f311413d4c91373091

    • SHA512

      f05cb3892b51266956d6b0e1ae3725b32054c38d31043406d30f8276281591d08c143a97a1123f590a863efd70e1b5016ca348d2d5d343f3a3a885a92a11738b

    • SSDEEP

      384:UL7li/2zYq2DcEQvdQcJKLTp/NK9xaSK:CEMCQ9cSK

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks