Overview

overview

10

Static

static

10

net-filim-...pt.exe

windows7-x64

7

net-filim-...pt.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    net-filim-patched-noencrypt.zip

  • Size

    38KB

  • Sample

    240617-bajdmawglg

  • MD5

    b0304c308048bdf0decb0898bf8197f1

  • SHA1

    5a4d336f0075e0435a77aed5047ffcca83cbc12c

  • SHA256

    ecf767537b8eddd232d369232d25480668276dbc2e6e69065401151db0072848

  • SHA512

    28883b23ebba780147091cfeb4b1c0de9a03746cdc35193aa290e47c2c65a86258ff6dce70f9b4330b7ab34663d8786b825f8b54e69ba522e6293a9584d8c653

  • SSDEEP

    768:KHVHvwpKtV2E4Zqu4WlYdUq4eEpWLY4gqWDqLQb0wTqGwovB/t6b:KBWwxhuihrMWLY4gPDqUy1cBV6b

Score
10/10
nefilim

Malware Config

Targets

    • Target

      net-filim-patched-noencrypt.exe

    • Size

      70KB

    • MD5

      712ca5fea2fcfc38404ba349eb697c06

    • SHA1

      9dc61f152068231c043b25a3f860331974a94e68

    • SHA256

      c6e0f4d9bf7a2203935fa8a248de934a248010938934222fccdee3d87a26fc77

    • SHA512

      6d77e763d165d14d0ea4b49d7fbf3d5c69b0b8312ffc66a0a9639942c56b9e26c6cdfbcf0fdbe3e17c324bcbffc28b85b23336a305a8f83071da8a3db5959435

    • SSDEEP

      768:lXSzkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshT3ED18nv04ZPqpb348Uq1krHE:lwMWV3gDCk6EBwT/kJbvkbuq1krj0x

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks