Overview

overview

8

Static

static

1

Sales Cont...619.gz

windows7-x64

3

Sales Cont...619.gz

windows10-2004-x64

3

Sales Cont...19.vbs

windows7-x64

8

Sales Cont...19.vbs

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Sales Contract 3987420240619.gz

  • Size

    82KB

  • Sample

    240627-t5vz1szeqe

  • MD5

    2ac7a11c018f5eab414e3ff401baa61d

  • SHA1

    56bc8d9b9703f527eebf04e7ad864006e32d80e0

  • SHA256

    4499dc369b7fe56ee3d2668be8de7e617932f1a6daecb4189a4cdb6a3bc035ba

  • SHA512

    b58b451ea61ded6edfa2f3ae34766dd6232eec3090754d31645a53b10f5425c2c46d5758984ffb30e1ba477c01fa5047e3aac7839c5097044c23797c6da4e694

  • SSDEEP

    1536:wHM+9+iaurpnsDRNB7w71rp1Bho/fQuIKQr6tJijtA0JANbP73fe1DKyZ:wJ4iauFsDLB7w71FhonT1SZnQbPzfCWo

Score
8/10

Malware Config

Targets

    • Target

      Sales Contract 3987420240619.gz

    • Size

      82KB

    • MD5

      2ac7a11c018f5eab414e3ff401baa61d

    • SHA1

      56bc8d9b9703f527eebf04e7ad864006e32d80e0

    • SHA256

      4499dc369b7fe56ee3d2668be8de7e617932f1a6daecb4189a4cdb6a3bc035ba

    • SHA512

      b58b451ea61ded6edfa2f3ae34766dd6232eec3090754d31645a53b10f5425c2c46d5758984ffb30e1ba477c01fa5047e3aac7839c5097044c23797c6da4e694

    • SSDEEP

      1536:wHM+9+iaurpnsDRNB7w71rp1Bho/fQuIKQr6tJijtA0JANbP73fe1DKyZ:wJ4iauFsDLB7w71FhonT1SZnQbPzfCWo

    Score
    3/10
    behavioral1behavioral2

    • Target

      Sales Contract 3987420240619.vbs

    • Size

      210KB

    • MD5

      267b72a32af0e8de8fa699b068acda4e

    • SHA1

      38e83a1bde7a330e4457418804cceb8849102109

    • SHA256

      e9794189f50efe00351a2542fdf95e9b8ce95a35a357e28c14e97b023acb32a0

    • SHA512

      1be3c4c1e39939b1a208f395dd6dfd13fbcd016e74ee153344976bb856ea83ae0780b3eff6293bf1c821cf23dde6ac51bbb194566574e8ad72af6cb65f08d9f5

    • SSDEEP

      6144:lcpTPh8jo05VyISgHvr2E7qJAa0vRg6JiwMgRYs6MVgzFzY3Wyvq2tP7KtEB4e:FHJ4SWaD

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks