General

  • Target

    de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02

  • Size

    332KB

  • Sample

    240601-evfp1sab64

  • MD5

    4509521481b2c23082e4c3959e4c37d4

  • SHA1

    923e065a81c4401b7a265335ca3850d16e22921b

  • SHA256

    de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02

  • SHA512

    03ef59e273f93e91c9294594380e18833cfdd5c0a1a792a416304e73af0286fc42363de467149d91484d8803d85996f64b4c91c8a6dafaa5d97f3bd81d8f77a6

  • SSDEEP

    3072:Vl0/Nglon/yDKfzFLazk76QDPQ8GDiLE:Vlug+nWKF/dQ8Gu

Score
10/10

Malware Config

Targets

    • Target

      de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02

    • Size

      332KB

    • MD5

      4509521481b2c23082e4c3959e4c37d4

    • SHA1

      923e065a81c4401b7a265335ca3850d16e22921b

    • SHA256

      de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02

    • SHA512

      03ef59e273f93e91c9294594380e18833cfdd5c0a1a792a416304e73af0286fc42363de467149d91484d8803d85996f64b4c91c8a6dafaa5d97f3bd81d8f77a6

    • SSDEEP

      3072:Vl0/Nglon/yDKfzFLazk76QDPQ8GDiLE:Vlug+nWKF/dQ8Gu

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks