General

  • Target

    207143c22a9b04bb19838d6a2320af955d7ae619f792ac64f539551d6d762856N

  • Size

    63KB

  • Sample

    240919-hqq7qswerq

  • MD5

    a5626f25977c7b66e20ffd8429e7ed40

  • SHA1

    7b8914fab6d7cb6a96542bde2c171aa6339e73cf

  • SHA256

    207143c22a9b04bb19838d6a2320af955d7ae619f792ac64f539551d6d762856

  • SHA512

    51ea9a269a75623cea22412b8274fc5c1329257f581d70dbe755d22c79eea78d80a49559ac412b2a6eef0c9269cd09aa025822ea61c798acc03cf382d50ed474

  • SSDEEP

    768:MDcpEBMLfQcubV5wGE96YyXDTLdEBBBB9:MDcfLfIbtEbyXfZE

Malware Config

Targets

    • Target

      207143c22a9b04bb19838d6a2320af955d7ae619f792ac64f539551d6d762856N

    • Size

      63KB

    • MD5

      a5626f25977c7b66e20ffd8429e7ed40

    • SHA1

      7b8914fab6d7cb6a96542bde2c171aa6339e73cf

    • SHA256

      207143c22a9b04bb19838d6a2320af955d7ae619f792ac64f539551d6d762856

    • SHA512

      51ea9a269a75623cea22412b8274fc5c1329257f581d70dbe755d22c79eea78d80a49559ac412b2a6eef0c9269cd09aa025822ea61c798acc03cf382d50ed474

    • SSDEEP

      768:MDcpEBMLfQcubV5wGE96YyXDTLdEBBBB9:MDcfLfIbtEbyXfZE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks