Resubmissions

05-10-2024 22:40

241005-2lknyavenk 9

05-10-2024 22:32

241005-2fzkxazarc 9

General

  • Target

    calc.exe

  • Size

    201KB

  • Sample

    241005-2lknyavenk

  • MD5

    2f9fdad776d8626f2ce8625211831e91

  • SHA1

    21d8413eb0d60b36fc249f8025c277b557fefde3

  • SHA256

    9b66a8ea0f1c64965b06e7a45afbe56f2d4e6d5ef65f32446defccbebe730813

  • SHA512

    2abd61c6bea7c748f81cdd18133582217bd06dd19506f13f89953f8c7bd662fc5233540b9f56c57aa94e038c674128fc46dd280e2f7db642343fc5a45da25feb

  • SSDEEP

    6144:96LkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4oI:TMJ1X2og0MHGKT3RRwG

Malware Config

Targets

    • Target

      calc.exe

    • Size

      201KB

    • MD5

      2f9fdad776d8626f2ce8625211831e91

    • SHA1

      21d8413eb0d60b36fc249f8025c277b557fefde3

    • SHA256

      9b66a8ea0f1c64965b06e7a45afbe56f2d4e6d5ef65f32446defccbebe730813

    • SHA512

      2abd61c6bea7c748f81cdd18133582217bd06dd19506f13f89953f8c7bd662fc5233540b9f56c57aa94e038c674128fc46dd280e2f7db642343fc5a45da25feb

    • SSDEEP

      6144:96LkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4oI:TMJ1X2og0MHGKT3RRwG

    • Grants admin privileges

      Uses net.exe to modify the user's privileges.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks