General

  • Target

    X22-74224.zip

  • Size

    3.6MB

  • Sample

    240523-nbxzmaea9z

  • MD5

    527e4431019540506d634ed7122ab48c

  • SHA1

    36d2b97b966b2a65478bcef64679baee3d87a359

  • SHA256

    01be832152327cf39ccb91a99c630d1ac48bca0306a2ab5cb48349c555a6ef3d

  • SHA512

    0edde14f5028157c6826c8466e4e4cf8c6540fa8dd36bea102aef18261e193d577e71c8cd3ee9dcc420f9e363e8baa21cd7bc89e7617a10c59d4d50acb11562b

  • SSDEEP

    49152:amOM7wOqoRr9ZBj07/LLsROkyxYUaVDez2Ks99jsKLbCSGr9mb49vD08esec+ksg:ROM8utNysROJYBT9uKLWIb4xJ4nEN

Score
7/10

Malware Config

Targets

    • Target

      X22-74224.EXE

    • Size

      3.7MB

    • MD5

      133800da193dac14b538577b2a5f39d0

    • SHA1

      7135c3dd93c43d9d323c16f4323eeaa28c415f6f

    • SHA256

      27a49064bae3fbe92df2738884079f2214865f8fa2b84d21229f05ac1868928f

    • SHA512

      bcf9d3b3528f63370e6da6364b8fbfda6044f3a430d4a51501d9cfb1d5103e687bcb59bdceb163af331bcb429980396844cf26d29aeba89ed79813fefb83408b

    • SSDEEP

      98304:DNM0iKxRMIm/Ly4RYXAffiiIiQLAUUuQNnn02nj:DVxRc/W4YwfKHiQZT2j

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks