General

  • Target

    e1585759fde0ed1f1495b36bccc8f2b4928974ce223579166581b0310869c452

  • Size

    13.8MB

  • Sample

    240825-qjm6hawdmf

  • MD5

    da4efd8d965a3612f8d06d75c907c127

  • SHA1

    91aae2a778bc540581efc04329e4bb38ed55b453

  • SHA256

    e1585759fde0ed1f1495b36bccc8f2b4928974ce223579166581b0310869c452

  • SHA512

    990bcb9c3d0569a972fa3b0163e410ba055c60931229a1c255db374006a6b51c48d336c7f078f939da092a2ec9fb98917aeb2f6d7e3863b3731c0e8328dec3c8

  • SSDEEP

    393216:RazrtADYq6o9mJEk/RXut1LySQ2eFyFPXCf3P4Hfy:gmDYo9mJXR+vySMFyh03P4Hfy

Score
7/10

Malware Config

Targets

    • Target

      mẫu.SF1.exe

    • Size

      14.2MB

    • MD5

      0a4e27f26c263b57651a9659844c14e8

    • SHA1

      b1c83f8240efb72452a676877c6952b80aa094c9

    • SHA256

      61297d57b70e37c570296fd01448faf69bb1fe488181c193b23f1a57768fc6d2

    • SHA512

      0deea24a36bb589dd55378166eff290ea88684dc5a662d5b3c4911c75420b8dd29df769ea7f056853860b78d0e82d7b84d5c2e46a54effad946170ce0ab994cc

    • SSDEEP

      393216:K/t2DiYw87KVHu7/9kv/7ciYw87Kb/UU+UGvq:FDiK7KVM/KbciK7Kjr+UGvq

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks