Resubmissions

15-08-2024 11:42

240815-nt6pgsvcmj 7

15-08-2024 11:37

240815-nrkz1avbpj 10

15-08-2024 11:36

240815-nqyjpsvbmq 10

15-08-2024 11:33

240815-npbcsavbjm 10

General

  • Target

    ae1265e9fe0ac39bbe970a3fa66c64b0N.exe

  • Size

    282KB

  • Sample

    240815-nt6pgsvcmj

  • MD5

    ae1265e9fe0ac39bbe970a3fa66c64b0

  • SHA1

    9239a5d795a2d97e72e7bd9b48b125d0e2459960

  • SHA256

    87a574cbf6233e2fd7a3872da22451ae49f6248cca5c900dab49207e0f0135b0

  • SHA512

    ff66d820fd16cc06ee99b995b1de7aa22d545da35518a1b02c5d5dee6a2d6c8670d3c3ba6934c0f0ebeaadb577c9de91dd9db8f8b27d1636f4f7514a6b4430a5

  • SSDEEP

    6144:boy5p178U0MURaGyNXYWQzHazRfXrwSRnWwhrQ66fKkfQ:boSeGUA5YZazpXUmZhZ6Sp

Malware Config

Targets

    • Target

      ae1265e9fe0ac39bbe970a3fa66c64b0N.exe

    • Size

      282KB

    • MD5

      ae1265e9fe0ac39bbe970a3fa66c64b0

    • SHA1

      9239a5d795a2d97e72e7bd9b48b125d0e2459960

    • SHA256

      87a574cbf6233e2fd7a3872da22451ae49f6248cca5c900dab49207e0f0135b0

    • SHA512

      ff66d820fd16cc06ee99b995b1de7aa22d545da35518a1b02c5d5dee6a2d6c8670d3c3ba6934c0f0ebeaadb577c9de91dd9db8f8b27d1636f4f7514a6b4430a5

    • SSDEEP

      6144:boy5p178U0MURaGyNXYWQzHazRfXrwSRnWwhrQ66fKkfQ:boSeGUA5YZazpXUmZhZ6Sp

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks