General

  • Target

    0cff79248cd5e2003116f1a6ae45dd50N

  • Size

    467KB

  • Sample

    240913-zf52ksxflm

  • MD5

    0cff79248cd5e2003116f1a6ae45dd50

  • SHA1

    9aff8576f52642de3f3272743cf3045541d0999c

  • SHA256

    3a075552b17a78bd59689344171b74e6a192e5094081982d84e2bf409420e792

  • SHA512

    98f6afcd5929fc33cf416542395478c3ca18a8bbe72951968fdd993aef84cae8f6b805184c32992b491a991cc6eb0b7eac50aa04e7e9b965b63cbed069b7ae98

  • SSDEEP

    12288:8WBm+95nHfF2mgewFX5Eas6e42KpuiqRfr:8WBz95ndbgfX5rVe75r

Score
7/10

Malware Config

Targets

    • Target

      0cff79248cd5e2003116f1a6ae45dd50N

    • Size

      467KB

    • MD5

      0cff79248cd5e2003116f1a6ae45dd50

    • SHA1

      9aff8576f52642de3f3272743cf3045541d0999c

    • SHA256

      3a075552b17a78bd59689344171b74e6a192e5094081982d84e2bf409420e792

    • SHA512

      98f6afcd5929fc33cf416542395478c3ca18a8bbe72951968fdd993aef84cae8f6b805184c32992b491a991cc6eb0b7eac50aa04e7e9b965b63cbed069b7ae98

    • SSDEEP

      12288:8WBm+95nHfF2mgewFX5Eas6e42KpuiqRfr:8WBz95ndbgfX5rVe75r

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks