General

  • Target

    7ea4d723887430299cc4749b45025e5320775495aa83134da927f622915f4b75

  • Size

    101KB

  • Sample

    241031-bveaeawejb

  • MD5

    9051584420656289a820484588d75c3c

  • SHA1

    695cd6e5b506044cbb33c7b050726a92fd2a6fa5

  • SHA256

    7ea4d723887430299cc4749b45025e5320775495aa83134da927f622915f4b75

  • SHA512

    f74ed27676c3823eceb6af1bba482956688418a0bed33ac8d95aa0039951e72476d6d42435a13242363cf1320810e06bd6e18ca1d46c6adbb462583f089233dd

  • SSDEEP

    1536:0GYU/W2FHG6jMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7W:0fU/Wr6jMauSuiWNi9CO+WARJrWNZw

Malware Config

Targets

    • Target

      7ea4d723887430299cc4749b45025e5320775495aa83134da927f622915f4b75

    • Size

      101KB

    • MD5

      9051584420656289a820484588d75c3c

    • SHA1

      695cd6e5b506044cbb33c7b050726a92fd2a6fa5

    • SHA256

      7ea4d723887430299cc4749b45025e5320775495aa83134da927f622915f4b75

    • SHA512

      f74ed27676c3823eceb6af1bba482956688418a0bed33ac8d95aa0039951e72476d6d42435a13242363cf1320810e06bd6e18ca1d46c6adbb462583f089233dd

    • SSDEEP

      1536:0GYU/W2FHG6jMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7W:0fU/Wr6jMauSuiWNi9CO+WARJrWNZw

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks