General

  • Target

    2df394ecf433b6717762785b8354cfa291c0ad44324d5fc8b58e2fe9849790a6N.exe

  • Size

    56KB

  • Sample

    241113-w9tc4azqhj

  • MD5

    de5c836c0cc97d2c3c925a267dfb5cc0

  • SHA1

    3c96c673f191467d535672315c82eda1ab660f06

  • SHA256

    2df394ecf433b6717762785b8354cfa291c0ad44324d5fc8b58e2fe9849790a6

  • SHA512

    45aa9eb6306fe681f9b31e25d328c9ad281f9d7aa02db0be482e72396319f66ab67c91317da5829a07d19f703995d894b311659560cc55c00a4a5e6af0aa8449

  • SSDEEP

    1536:1m3AAIWOdUHmOrIImCtQcjlxi7sTmRQQ58lA:AwdUH/rIIm6lxi7sTuj3

Malware Config

Targets

    • Target

      2df394ecf433b6717762785b8354cfa291c0ad44324d5fc8b58e2fe9849790a6N.exe

    • Size

      56KB

    • MD5

      de5c836c0cc97d2c3c925a267dfb5cc0

    • SHA1

      3c96c673f191467d535672315c82eda1ab660f06

    • SHA256

      2df394ecf433b6717762785b8354cfa291c0ad44324d5fc8b58e2fe9849790a6

    • SHA512

      45aa9eb6306fe681f9b31e25d328c9ad281f9d7aa02db0be482e72396319f66ab67c91317da5829a07d19f703995d894b311659560cc55c00a4a5e6af0aa8449

    • SSDEEP

      1536:1m3AAIWOdUHmOrIImCtQcjlxi7sTmRQQ58lA:AwdUH/rIIm6lxi7sTuj3

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks