General

  • Target

    607ad153d115bbc943624e7272bc39711d1d444ae5f64f2bed724a16d052b962

  • Size

    147KB

  • Sample

    240531-19y1ssgd55

  • MD5

    17f0cad789b56d31ce9e819e3cfed4c1

  • SHA1

    d0e1747b3b259f24b2c665b327ecd5509b75f5c5

  • SHA256

    607ad153d115bbc943624e7272bc39711d1d444ae5f64f2bed724a16d052b962

  • SHA512

    bf6465af0bceae3c6305c5774edb70cfbd2e176e5a6d3930450e53ecf9dba3328a0a3353e3935f3c9d3d25750867771747bab8e7ca7ff0e6aa030f7833961ecc

  • SSDEEP

    3072:C1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1Vuz1i/NU82OMYcYr:8i/NjO5xbg/CSUFLTwMjs6Ii/N+O7Vt

Score
10/10

Malware Config

Targets

    • Target

      607ad153d115bbc943624e7272bc39711d1d444ae5f64f2bed724a16d052b962

    • Size

      147KB

    • MD5

      17f0cad789b56d31ce9e819e3cfed4c1

    • SHA1

      d0e1747b3b259f24b2c665b327ecd5509b75f5c5

    • SHA256

      607ad153d115bbc943624e7272bc39711d1d444ae5f64f2bed724a16d052b962

    • SHA512

      bf6465af0bceae3c6305c5774edb70cfbd2e176e5a6d3930450e53ecf9dba3328a0a3353e3935f3c9d3d25750867771747bab8e7ca7ff0e6aa030f7833961ecc

    • SSDEEP

      3072:C1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1Vuz1i/NU82OMYcYr:8i/NjO5xbg/CSUFLTwMjs6Ii/N+O7Vt

    Score
    9/10
    • UPX dump on OEP (original entry point)

    • Modifies Installed Components in the registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks