General

  • Target

    1d057ebb99d1c533f8fc7d76e1687920N

  • Size

    9.1MB

  • Sample

    240911-q9bv6atgjr

  • MD5

    1d057ebb99d1c533f8fc7d76e1687920

  • SHA1

    9c71e33cfe73d3f31c1e502e293cd08af7d49f80

  • SHA256

    6bea1931fa6e555137cc6f15593856a5bf2f1445df702f766e3454defa3036f1

  • SHA512

    c062d1e4842825eb70e968ef68b37f40c121940cbbc42700080d0f869efa92452531275108b3d7b1a8b147ec9050926c7f29a1fab6f1a5624d54a6823c4f4ab3

  • SSDEEP

    196608:Xlbrq3GhKGcRHaL5fjsteMmFIfxcDNvUpUWiHoZyEAZ+FcAjoSZVW:XlbW3GhQZapemOcpUpUWiHowMcWoOM

Malware Config

Targets

    • Target

      1d057ebb99d1c533f8fc7d76e1687920N

    • Size

      9.1MB

    • MD5

      1d057ebb99d1c533f8fc7d76e1687920

    • SHA1

      9c71e33cfe73d3f31c1e502e293cd08af7d49f80

    • SHA256

      6bea1931fa6e555137cc6f15593856a5bf2f1445df702f766e3454defa3036f1

    • SHA512

      c062d1e4842825eb70e968ef68b37f40c121940cbbc42700080d0f869efa92452531275108b3d7b1a8b147ec9050926c7f29a1fab6f1a5624d54a6823c4f4ab3

    • SSDEEP

      196608:Xlbrq3GhKGcRHaL5fjsteMmFIfxcDNvUpUWiHoZyEAZ+FcAjoSZVW:XlbW3GhQZapemOcpUpUWiHowMcWoOM

    • Downloads MZ/PE file

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks