Resubmissions

01/10/2024, 16:52

241001-vdnbjazfjm 7

01/10/2024, 16:51

241001-vc87lstfma 3

General

  • Target

    Електронне платіжне доручення.pdf.scr

  • Size

    25.7MB

  • Sample

    241001-vdnbjazfjm

  • MD5

    c9e32bde43d9adb46319b3279e0c19ec

  • SHA1

    b64a9c36caa481dd75161d3c9b07ef67cc35072b

  • SHA256

    f84e05c4ae4782ddf3f489874b66aeba2e4c4de92d1eeb2765940909e3b9d8f6

  • SHA512

    324ce13eb5999994d4fada7407055a9118dde8e24bb1780eb56a86cfc3ebc4089c6753b6f4958a83382f11e4158a43632c64d9e4e6280b3ff58a25b9bfe45bcd

  • SSDEEP

    393216:6pQmMiC1alOIKx/h5xHwfJCW9q9sNOf/QNJ3t6ua+bqq6nKVIMfke4jl7SCoP55:NTba4xjxHm4Z/EtKOqVcIU94BOC855

Score
7/10

Malware Config

Targets

    • Target

      Електронне платіжне доручення.pdf.scr

    • Size

      25.7MB

    • MD5

      c9e32bde43d9adb46319b3279e0c19ec

    • SHA1

      b64a9c36caa481dd75161d3c9b07ef67cc35072b

    • SHA256

      f84e05c4ae4782ddf3f489874b66aeba2e4c4de92d1eeb2765940909e3b9d8f6

    • SHA512

      324ce13eb5999994d4fada7407055a9118dde8e24bb1780eb56a86cfc3ebc4089c6753b6f4958a83382f11e4158a43632c64d9e4e6280b3ff58a25b9bfe45bcd

    • SSDEEP

      393216:6pQmMiC1alOIKx/h5xHwfJCW9q9sNOf/QNJ3t6ua+bqq6nKVIMfke4jl7SCoP55:NTba4xjxHm4Z/EtKOqVcIU94BOC855

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks