Resubmissions

07-01-2025 15:01

250107-sd8alaxqdq 7

06-01-2025 07:51

250106-jptrxa1kav 10

06-01-2025 07:48

250106-jnl1ns1jgv 5

08-09-2024 17:12

240908-vqwtfazere 7

General

  • Target

    BLTools v2.7.1 [PRO2].zip

  • Size

    13.8MB

  • Sample

    240908-vqwtfazere

  • MD5

    01952f721e3cebff244c689b5cd24756

  • SHA1

    d77afa2071c5487b0cc39243a75e1aaab082975c

  • SHA256

    aafde59bd18e2ea55967da235f68985cbd0e17cd39ae625fd5fae8ce001a4c4b

  • SHA512

    93259ccbd91be6f62fc1b2b0d818773702a2166835dff67eab33ee27537ed452f38e61dcc6651d328d87011fb38cb243aca99ffdc78fa3b66f19fa48ae75fe53

  • SSDEEP

    196608:DCKyX8k4lfzoILWsniW8lnJ45/9iD54+V11bFv4zmkt/P:Gtskkb1LWsnk+h

Score
7/10

Malware Config

Targets

    • Target

      Btools v2.7 [PRO].exe

    • Size

      3.4MB

    • MD5

      127e32da28efb59592ccb7349022b889

    • SHA1

      f29034dccae28f7f5d17731270e46a9bccedea9e

    • SHA256

      1851d8d4e6eb5b55a5405e14124a36cb93414e29b9350e54ab998b55578aa744

    • SHA512

      fffe633962caa18b7899961f2384b7ffa9cabb61e2dd04ec0b311cd8336c89d39169b0d3153ec39208767b7fb5167d2cbf0bd2495a71477bea3c455b24cfc456

    • SSDEEP

      98304:B2cPK8CMX8XU4KmfzF/W/ALM3JJRWxiW:YCKyX8k4lfzoILWs

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks