General

  • Target

    227f4329652a68a26db28e292e84a1b979bd49558059598d9bf282e01d65da2aN

  • Size

    558KB

  • Sample

    241107-m4tbgazqby

  • MD5

    7b401ce98de7fc8a35db7082daf129e0

  • SHA1

    3d76246c44151ab0b44c05e45efdcd9b73678966

  • SHA256

    227f4329652a68a26db28e292e84a1b979bd49558059598d9bf282e01d65da2a

  • SHA512

    bac3099833dcd8d2a044036136aefcf2cab3700736bd176f59356fc5ff1c214ff01b2156d4740885b09c5d676c5418ae75a789f672cbf47b9dbfb18682827bdc

  • SSDEEP

    12288:/1+vKnoA0cdoIl9jmDBJ4Uh2DEq/51r575VPFlY5n9Vo:9+vg0HU9EP4UheEq/B7XcA

Malware Config

Targets

    • Target

      227f4329652a68a26db28e292e84a1b979bd49558059598d9bf282e01d65da2aN

    • Size

      558KB

    • MD5

      7b401ce98de7fc8a35db7082daf129e0

    • SHA1

      3d76246c44151ab0b44c05e45efdcd9b73678966

    • SHA256

      227f4329652a68a26db28e292e84a1b979bd49558059598d9bf282e01d65da2a

    • SHA512

      bac3099833dcd8d2a044036136aefcf2cab3700736bd176f59356fc5ff1c214ff01b2156d4740885b09c5d676c5418ae75a789f672cbf47b9dbfb18682827bdc

    • SSDEEP

      12288:/1+vKnoA0cdoIl9jmDBJ4Uh2DEq/51r575VPFlY5n9Vo:9+vg0HU9EP4UheEq/B7XcA

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks