General

  • Target

    (x64bit.)_patch.exe

  • Size

    839KB

  • Sample

    240817-d76arsvgka

  • MD5

    f8b1eabcbc118609bb2260031829f87f

  • SHA1

    62970ae57302ae52f1291a9c728a6a81ffa2ec73

  • SHA256

    2132faa1b6fff1d8a8a51a64b463d95f2ec0b244d66aad8abb44776f40bd0fc6

  • SHA512

    18296e7748c964b823fbacc5ffe3f1debc7d946855040810d73e649e653cb13f8590a83375b9bce0e4966148e5abf096b1a5472a10fac31d97f62beda71ccc29

  • SSDEEP

    24576:nprTzqF5dnTVW3hr7ALun+zO9Biek/uaOkjrlHOmnve:Ra5IF7P+zO9B9k/uarpHjm

Score
8/10

Malware Config

Targets

    • Target

      (x64bit.)_patch.exe

    • Size

      839KB

    • MD5

      f8b1eabcbc118609bb2260031829f87f

    • SHA1

      62970ae57302ae52f1291a9c728a6a81ffa2ec73

    • SHA256

      2132faa1b6fff1d8a8a51a64b463d95f2ec0b244d66aad8abb44776f40bd0fc6

    • SHA512

      18296e7748c964b823fbacc5ffe3f1debc7d946855040810d73e649e653cb13f8590a83375b9bce0e4966148e5abf096b1a5472a10fac31d97f62beda71ccc29

    • SSDEEP

      24576:nprTzqF5dnTVW3hr7ALun+zO9Biek/uaOkjrlHOmnve:Ra5IF7P+zO9B9k/uarpHjm

    Score
    8/10
    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks