General

  • Target

    2e148bf19d0d30ceec10222dd69857bbaebf04d96040e3c8c043ffaa4a3bb358

  • Size

    716KB

  • Sample

    240528-bm4v4aad36

  • MD5

    fa790327ca1413ab85708fb09b72c1d7

  • SHA1

    9d9cdc23d5ad96598d30827aa58ae91303be29a6

  • SHA256

    2e148bf19d0d30ceec10222dd69857bbaebf04d96040e3c8c043ffaa4a3bb358

  • SHA512

    de39baf903be92d18afb7fcb4774afcbf9d6a08b504244780233d93db3d9e6e8016946ccb558a6e579a2f5c27ce9786522dd556727713fb777cc31bf86d07749

  • SSDEEP

    12288:dmJWW3Jyn42NxWXD+VBK/DEFPlgVH+XcbBDT1YQrk3UfbzM8LaB4Henbr:oJWW2WXD+VBcDEFPyH+MbBDT1YQGWb3g

Malware Config

Targets

    • Target

      2e148bf19d0d30ceec10222dd69857bbaebf04d96040e3c8c043ffaa4a3bb358

    • Size

      716KB

    • MD5

      fa790327ca1413ab85708fb09b72c1d7

    • SHA1

      9d9cdc23d5ad96598d30827aa58ae91303be29a6

    • SHA256

      2e148bf19d0d30ceec10222dd69857bbaebf04d96040e3c8c043ffaa4a3bb358

    • SHA512

      de39baf903be92d18afb7fcb4774afcbf9d6a08b504244780233d93db3d9e6e8016946ccb558a6e579a2f5c27ce9786522dd556727713fb777cc31bf86d07749

    • SSDEEP

      12288:dmJWW3Jyn42NxWXD+VBK/DEFPlgVH+XcbBDT1YQrk3UfbzM8LaB4Henbr:oJWW2WXD+VBcDEFPyH+MbBDT1YQGWb3g

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks