Resubmissions

13/09/2024, 13:59

240913-ragg2atdnf8

13/09/2024, 13:55

240913-q77vtatcqc8

General

  • Target
    malware.zip
  • Size 121KB
  • Sample240913-ragg2atdnf
  • SHA256 98e0c1e5d2e8e25ff99029d2f76a45a1b320c8cf3349df45d02dcd4070c0f49f
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      locky sample/document_copy.js
    • Size 5KB
    • SHA256 23e0e6edffc78a82ccef3cb055fda745013fde6feee5356f94715f41b2640453
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      locky sample/document_copy_payload.exe
    • Size 151KB
    • SHA256 d5c93927b531e8629898b31e277034c0802befa26ffe66ed3df96d25282fc408
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      sample2/invoice.js
    • Size 1KB
    • SHA256 ff55d814dc8e36e2e43686d8f02fed61df15d55f03f1d27ea71bd5382c4c8d4f
    • MD5 SHA1 SHA512
    Score
    8/10
    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks