Overview

overview

7

Static

static

7

MontanaWolfTeam_.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MontanaWolfTeam_.exe

  • Size

    5.4MB

  • Sample

    241011-zlplsashqd

  • MD5

    f5d18126eaef7c84c5e952a59ce1d256

  • SHA1

    4fb6cc7cfae2fd3c917d58cc0a0b43872fc554d6

  • SHA256

    31ce17a4bbbaac10571232f542f867f806d81b89e4952c4afabec1497b8eaf02

  • SHA512

    75856c803be1166b50f32ddb586822ad3172b2cd18acc1be8a2f5efa8ca9ae08f549696692379b135c87ff87ca4c3f35f42e83baf822b4731014cd69754ac042

  • SSDEEP

    98304:q1wPi5MIH/2s/mebveZLpkGH/2s/mebveZLpkuuaPJrTxhTFj:WwPi5MIH/TStWGH/TStWu/1DT

Score
7/10
discovery

Malware Config

Targets

    • Target

      MontanaWolfTeam_.exe

    • Size

      5.4MB

    • MD5

      f5d18126eaef7c84c5e952a59ce1d256

    • SHA1

      4fb6cc7cfae2fd3c917d58cc0a0b43872fc554d6

    • SHA256

      31ce17a4bbbaac10571232f542f867f806d81b89e4952c4afabec1497b8eaf02

    • SHA512

      75856c803be1166b50f32ddb586822ad3172b2cd18acc1be8a2f5efa8ca9ae08f549696692379b135c87ff87ca4c3f35f42e83baf822b4731014cd69754ac042

    • SSDEEP

      98304:q1wPi5MIH/2s/mebveZLpkGH/2s/mebveZLpkuuaPJrTxhTFj:WwPi5MIH/TStWGH/TStWu/1DT

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks