Resubmissions

27-09-2024 14:44

240927-r4fslaxdjr 8

27-09-2024 14:42

240927-r3gnhazdkc 8

General

  • Target

    Arctic External RBX.exe

  • Size

    28KB

  • Sample

    240927-r3gnhazdkc

  • MD5

    98ce7381766301417b81fdcee8d118f3

  • SHA1

    d1ccec2ad8027cd584f43a6b79d66307cce86e97

  • SHA256

    07df87e8302927f83d1b39f9674bc7fbdc14a0f549e981612bd45d122c268cdf

  • SHA512

    1d65146c46db7d2c03a5927de3e8fc60666bfe7b193b583cd49d830c91f823a452a571e8b49bd83829ffc7a727eaf627922973b6809cd8cb18df0e8bfa660a16

  • SSDEEP

    384:yHthk9sZK4TXq/RClTelLE/3R0o3/nmS8eC1HlrZtJzq/OdGUGs5xjHc2ZXod2/v:yzu0UNEPRCDrJRLdi

Score
8/10

Malware Config

Targets

    • Target

      Arctic External RBX.exe

    • Size

      28KB

    • MD5

      98ce7381766301417b81fdcee8d118f3

    • SHA1

      d1ccec2ad8027cd584f43a6b79d66307cce86e97

    • SHA256

      07df87e8302927f83d1b39f9674bc7fbdc14a0f549e981612bd45d122c268cdf

    • SHA512

      1d65146c46db7d2c03a5927de3e8fc60666bfe7b193b583cd49d830c91f823a452a571e8b49bd83829ffc7a727eaf627922973b6809cd8cb18df0e8bfa660a16

    • SSDEEP

      384:yHthk9sZK4TXq/RClTelLE/3R0o3/nmS8eC1HlrZtJzq/OdGUGs5xjHc2ZXod2/v:yzu0UNEPRCDrJRLdi

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks