General

  • Target

    c61bd24c2ea34633b0e8a9d7faff8d4f65516644fa943722359c2915e438ec83

  • Size

    208KB

  • Sample

    240701-czqpnsxaln

  • MD5

    186763632d09393f81aff5710d76e5ea

  • SHA1

    d9979c8e82bc1b2ed890cfeeb3b656bc289c967a

  • SHA256

    c61bd24c2ea34633b0e8a9d7faff8d4f65516644fa943722359c2915e438ec83

  • SHA512

    cf5a5e859c37b41e4af215da1deb183ca3deaead906c4974446168f422d3f6b1825e8fc5577338cddff9c627e686a33c16388b4eb8db1945ab453693464c2908

  • SSDEEP

    6144:EiZrAXYG5pwnvS+aFVJ7h9Wq3nBK0QEj:EieIG5pYvc7imK0Q

Score
7/10

Malware Config

Targets

    • Target

      c61bd24c2ea34633b0e8a9d7faff8d4f65516644fa943722359c2915e438ec83

    • Size

      208KB

    • MD5

      186763632d09393f81aff5710d76e5ea

    • SHA1

      d9979c8e82bc1b2ed890cfeeb3b656bc289c967a

    • SHA256

      c61bd24c2ea34633b0e8a9d7faff8d4f65516644fa943722359c2915e438ec83

    • SHA512

      cf5a5e859c37b41e4af215da1deb183ca3deaead906c4974446168f422d3f6b1825e8fc5577338cddff9c627e686a33c16388b4eb8db1945ab453693464c2908

    • SSDEEP

      6144:EiZrAXYG5pwnvS+aFVJ7h9Wq3nBK0QEj:EieIG5pYvc7imK0Q

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks