General

  • Target

    df33a7c7f3e39ca987b690120abbb3ba7b1a4f9ff2db01009c9892afb1fa3f89

  • Size

    25KB

  • Sample

    240727-fe63psybln

  • MD5

    4cee383af312729fd1fb4a770fc3f777

  • SHA1

    6344005d48adff5793ede16f908b1f1bb30804d2

  • SHA256

    df33a7c7f3e39ca987b690120abbb3ba7b1a4f9ff2db01009c9892afb1fa3f89

  • SHA512

    8872e1b793dc451ddad77730d11e708ebc3f96be708437fad58706418f5e27b1d4ebafebc665720d65ffffc6a6d61c84cf2496947bb8fb5a473f78a8a5dfb89b

  • SSDEEP

    384:uyILzMBFekVPIb1Vn1OHSAXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y1:oQrIXnB4QGPL4vzZq2o9W7GsxBbPr

Score
7/10

Malware Config

Targets

    • Target

      df33a7c7f3e39ca987b690120abbb3ba7b1a4f9ff2db01009c9892afb1fa3f89

    • Size

      25KB

    • MD5

      4cee383af312729fd1fb4a770fc3f777

    • SHA1

      6344005d48adff5793ede16f908b1f1bb30804d2

    • SHA256

      df33a7c7f3e39ca987b690120abbb3ba7b1a4f9ff2db01009c9892afb1fa3f89

    • SHA512

      8872e1b793dc451ddad77730d11e708ebc3f96be708437fad58706418f5e27b1d4ebafebc665720d65ffffc6a6d61c84cf2496947bb8fb5a473f78a8a5dfb89b

    • SSDEEP

      384:uyILzMBFekVPIb1Vn1OHSAXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y1:oQrIXnB4QGPL4vzZq2o9W7GsxBbPr

    Score
    7/10
    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks