General

  • Target

    sample

  • Size

    21KB

  • Sample

    241002-qg979axfrk

  • MD5

    f6b6b34c17158c47db7994a8a24c4e61

  • SHA1

    68c16abef315ee7a8ec620cb51e28d662452d231

  • SHA256

    0c5ef8ba45affb729366deeae57fe52dd9caecc375aefbe2af67238c93b95b50

  • SHA512

    0f0832f068a8b83d84e58d9e215c83d436f03bdb97db0f63d87179ac844e1949b655b37e2c306239695489e39ad4fde56125b00c545820cedca4da3c82eb4237

  • SSDEEP

    384:HNspa1ocy4v4lbGa9MvhpNj24YU+Crc2REu4Y0wM1ttgfcg1xCejiw:HH1ocy4wEa6JpNy4R1rAu4Y0wM1XWcqn

Score
8/10

Malware Config

Targets

    • Target

      sample

    • Size

      21KB

    • MD5

      f6b6b34c17158c47db7994a8a24c4e61

    • SHA1

      68c16abef315ee7a8ec620cb51e28d662452d231

    • SHA256

      0c5ef8ba45affb729366deeae57fe52dd9caecc375aefbe2af67238c93b95b50

    • SHA512

      0f0832f068a8b83d84e58d9e215c83d436f03bdb97db0f63d87179ac844e1949b655b37e2c306239695489e39ad4fde56125b00c545820cedca4da3c82eb4237

    • SSDEEP

      384:HNspa1ocy4v4lbGa9MvhpNj24YU+Crc2REu4Y0wM1ttgfcg1xCejiw:HH1ocy4wEa6JpNy4R1rAu4Y0wM1XWcqn

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks