General

  • Target

    456b881d41c57a215c8515d43471c2164d3bd5498a7f59edfe414516d03d234b

  • Size

    12KB

  • Sample

    240523-zq472agb73

  • MD5

    a28f2126263e0a3fd9a837a3f2f9da94

  • SHA1

    e12be636deddb474ce521449fd915c58b6974586

  • SHA256

    456b881d41c57a215c8515d43471c2164d3bd5498a7f59edfe414516d03d234b

  • SHA512

    a98b536a90ddc9e2dfd118b7e0a4bd8983d9fea793cd3a21472390c22e31936a0905fd10a32ea756e1a4333d4a5ce8c46a22fafa0f6395cbf04fcd75faaac03e

  • SSDEEP

    384:CL7li/2zZq2DcEQvdhcJKLTp/NK9xaWY:cZM/Q9cWY

Score
7/10

Malware Config

Targets

    • Target

      456b881d41c57a215c8515d43471c2164d3bd5498a7f59edfe414516d03d234b

    • Size

      12KB

    • MD5

      a28f2126263e0a3fd9a837a3f2f9da94

    • SHA1

      e12be636deddb474ce521449fd915c58b6974586

    • SHA256

      456b881d41c57a215c8515d43471c2164d3bd5498a7f59edfe414516d03d234b

    • SHA512

      a98b536a90ddc9e2dfd118b7e0a4bd8983d9fea793cd3a21472390c22e31936a0905fd10a32ea756e1a4333d4a5ce8c46a22fafa0f6395cbf04fcd75faaac03e

    • SSDEEP

      384:CL7li/2zZq2DcEQvdhcJKLTp/NK9xaWY:cZM/Q9cWY

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks