Resubmissions

02/10/2024, 15:27

241002-sv4czaxcpe 8

02/10/2024, 15:20

241002-sq2ctaxaqa 8

General

  • Target

    Screenshot 2024-09-29 020243.png

  • Size

    19KB

  • Sample

    241002-sv4czaxcpe

  • MD5

    b6a3fe3b64cee00756281a1693b1c1f6

  • SHA1

    4e999ac7ab94885763e840971d5e88972232c5fb

  • SHA256

    a0a6ebd905c56e59a1b24c44a483d50b87c536bf4bbc12ac2a5099a251d5d5ca

  • SHA512

    08a9fe6a100887335a1a7499e1d2fc9236b0221902dd0f04aa14f2cba0dd7e825c36fd5d8ba1625c114ef76e392a655d5484903563cbd949ed23b2131818a401

  • SSDEEP

    384:mi2q8YvozqdmbVyn0+LvNPIao3vYNZ5289lPNok5ki2Af9548:HcK3eyVLTX/Ae1Mi2Af348

Score
8/10

Malware Config

Targets

    • Target

      Screenshot 2024-09-29 020243.png

    • Size

      19KB

    • MD5

      b6a3fe3b64cee00756281a1693b1c1f6

    • SHA1

      4e999ac7ab94885763e840971d5e88972232c5fb

    • SHA256

      a0a6ebd905c56e59a1b24c44a483d50b87c536bf4bbc12ac2a5099a251d5d5ca

    • SHA512

      08a9fe6a100887335a1a7499e1d2fc9236b0221902dd0f04aa14f2cba0dd7e825c36fd5d8ba1625c114ef76e392a655d5484903563cbd949ed23b2131818a401

    • SSDEEP

      384:mi2q8YvozqdmbVyn0+LvNPIao3vYNZ5289lPNok5ki2Af9548:HcK3eyVLTX/Ae1Mi2Af348

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks