General

  • Target

    71cd92298b1892dad55264c9beb94fef7932bb47eca7e74b9acd95ece4078d38.exe

  • Size

    15.6MB

  • Sample

    240531-bqt53ahf9s

  • MD5

    d41b8b33dca69b626cc083e3f725384d

  • SHA1

    bd2200dea10dff581e2acee1c362630270768ad1

  • SHA256

    71cd92298b1892dad55264c9beb94fef7932bb47eca7e74b9acd95ece4078d38

  • SHA512

    19f30e7b8330f36c433e751c9c624ca1d926b3c1f46f252a567659a8dd38557a105d4826f68a32e4ed0401884756d73be235cbec8d4afb370a2200dadef78927

  • SSDEEP

    393216:aVCeyekXWdTrwkeWJtkNRXdNrB0WH3slV2yTtdJiOiiG+tu:5mZDwTreWXEMyzJNG+g

Malware Config

Targets

    • Target

      71cd92298b1892dad55264c9beb94fef7932bb47eca7e74b9acd95ece4078d38.exe

    • Size

      15.6MB

    • MD5

      d41b8b33dca69b626cc083e3f725384d

    • SHA1

      bd2200dea10dff581e2acee1c362630270768ad1

    • SHA256

      71cd92298b1892dad55264c9beb94fef7932bb47eca7e74b9acd95ece4078d38

    • SHA512

      19f30e7b8330f36c433e751c9c624ca1d926b3c1f46f252a567659a8dd38557a105d4826f68a32e4ed0401884756d73be235cbec8d4afb370a2200dadef78927

    • SSDEEP

      393216:aVCeyekXWdTrwkeWJtkNRXdNrB0WH3slV2yTtdJiOiiG+tu:5mZDwTreWXEMyzJNG+g

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks