General

  • Target

    21aacce63d48192aab29d10852a79fc2c8e313282e462d9adac4bec5e97114daN

  • Size

    56KB

  • Sample

    241109-17vklasnfy

  • MD5

    c7505a86d60f0070eec08c1a29f2a5d0

  • SHA1

    4e0932138e48f74ab9f03e092f1fe6b7eed750d2

  • SHA256

    21aacce63d48192aab29d10852a79fc2c8e313282e462d9adac4bec5e97114da

  • SHA512

    3ee8d25d82b0a07c426a64bc213c9d036136547ba3f37bc0f6367152ce42dcbfda30b0ef5db62076edc06c5216d74fe5c45d6361ff457e56da53dd9fd607b415

  • SSDEEP

    1536:rZTs8TEgG2AmET4Mjwc11xMLyXusGEjAj:rZA+02xE3kuzMLyXufj

Malware Config

Targets

    • Target

      21aacce63d48192aab29d10852a79fc2c8e313282e462d9adac4bec5e97114daN

    • Size

      56KB

    • MD5

      c7505a86d60f0070eec08c1a29f2a5d0

    • SHA1

      4e0932138e48f74ab9f03e092f1fe6b7eed750d2

    • SHA256

      21aacce63d48192aab29d10852a79fc2c8e313282e462d9adac4bec5e97114da

    • SHA512

      3ee8d25d82b0a07c426a64bc213c9d036136547ba3f37bc0f6367152ce42dcbfda30b0ef5db62076edc06c5216d74fe5c45d6361ff457e56da53dd9fd607b415

    • SSDEEP

      1536:rZTs8TEgG2AmET4Mjwc11xMLyXusGEjAj:rZA+02xE3kuzMLyXufj

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks