General

  • Target

    73290990aa4c0d1de694b353379f8cfe8b11e8de0b2aca7bd3a200862cbbb052

  • Size

    12KB

  • Sample

    240522-bc9nlafe6v

  • MD5

    a944cd04bfe3fc0e7d0ef54a7c964191

  • SHA1

    29944ee3caea69573e4987d67b63bc4d89feb189

  • SHA256

    73290990aa4c0d1de694b353379f8cfe8b11e8de0b2aca7bd3a200862cbbb052

  • SHA512

    5e67c17302b721f61467f28e132ace425c98f15e29187fc34434fe04f30ab56e891a3192fd301e98e29a378c47393d6bf862107c8a3ebb798e634c6a97c0ab7d

  • SSDEEP

    384:bL7li/2zgq2DcEQvdhcJKLTp/NK9xap+:PEM/Q9cp+

Score
7/10

Malware Config

Targets

    • Target

      73290990aa4c0d1de694b353379f8cfe8b11e8de0b2aca7bd3a200862cbbb052

    • Size

      12KB

    • MD5

      a944cd04bfe3fc0e7d0ef54a7c964191

    • SHA1

      29944ee3caea69573e4987d67b63bc4d89feb189

    • SHA256

      73290990aa4c0d1de694b353379f8cfe8b11e8de0b2aca7bd3a200862cbbb052

    • SHA512

      5e67c17302b721f61467f28e132ace425c98f15e29187fc34434fe04f30ab56e891a3192fd301e98e29a378c47393d6bf862107c8a3ebb798e634c6a97c0ab7d

    • SSDEEP

      384:bL7li/2zgq2DcEQvdhcJKLTp/NK9xap+:PEM/Q9cp+

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks