General

  • Target

    e16940068c8120bbaa4705ae6521cfc3d632f1aaab85cdfe9109c7586bd8bd56N

  • Size

    31KB

  • Sample

    241110-b7x82szldk

  • MD5

    60a3984d680342d3f29eece6f36d4350

  • SHA1

    4b591f1efdae389e5018943b5aa184aafcba6f1e

  • SHA256

    e16940068c8120bbaa4705ae6521cfc3d632f1aaab85cdfe9109c7586bd8bd56

  • SHA512

    4551325aa40928686a1583f5c2b0f8767e0f775361900e8612f1504ed8a6973168f77ca5a28062ff20c1d609e92dae8e73f8efb6f801a76e6ca665f6fccab2c8

  • SSDEEP

    768:fhZSoEpnp7JLyWWElhCSujaP6xdX2J1da:fhZshplLyWWsgSh6xdXIC

Score
7/10

Malware Config

Targets

    • Target

      e16940068c8120bbaa4705ae6521cfc3d632f1aaab85cdfe9109c7586bd8bd56N

    • Size

      31KB

    • MD5

      60a3984d680342d3f29eece6f36d4350

    • SHA1

      4b591f1efdae389e5018943b5aa184aafcba6f1e

    • SHA256

      e16940068c8120bbaa4705ae6521cfc3d632f1aaab85cdfe9109c7586bd8bd56

    • SHA512

      4551325aa40928686a1583f5c2b0f8767e0f775361900e8612f1504ed8a6973168f77ca5a28062ff20c1d609e92dae8e73f8efb6f801a76e6ca665f6fccab2c8

    • SSDEEP

      768:fhZSoEpnp7JLyWWElhCSujaP6xdX2J1da:fhZshplLyWWsgSh6xdXIC

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks