General

  • Target

    fa96b9c8c4c9b4e7a0ed0623246f039335b2c9a39d712e10346aa0f22b6604a6

  • Size

    182B

  • Sample

    240525-qxdtzsed2x

  • MD5

    023a9f4f69c40284a5587f0281d674a3

  • SHA1

    ec69f57ea22dbe7fd8fec3958c8e8c6dd6b6f39d

  • SHA256

    fa96b9c8c4c9b4e7a0ed0623246f039335b2c9a39d712e10346aa0f22b6604a6

  • SHA512

    22b6508c9903eeed036c624100ffc5c25ede1b9644251ecc34f5beafc8d73e1c48438963ad45b59d88725f6325ccdc4733d5fd77b17850d973ca12d61901d20f

Score
10/10

Malware Config

Targets

    • Target

      fa96b9c8c4c9b4e7a0ed0623246f039335b2c9a39d712e10346aa0f22b6604a6

    • Size

      182B

    • MD5

      023a9f4f69c40284a5587f0281d674a3

    • SHA1

      ec69f57ea22dbe7fd8fec3958c8e8c6dd6b6f39d

    • SHA256

      fa96b9c8c4c9b4e7a0ed0623246f039335b2c9a39d712e10346aa0f22b6604a6

    • SHA512

      22b6508c9903eeed036c624100ffc5c25ede1b9644251ecc34f5beafc8d73e1c48438963ad45b59d88725f6325ccdc4733d5fd77b17850d973ca12d61901d20f

    Score
    10/10
    • Modifies firewall policy service

    • Modifies security service

    • Registers new Print Monitor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks