Resubmissions

16-11-2024 14:42

241116-r3d8daybme 8

16-11-2024 14:36

241116-rywxmaskdm 10

General

  • Target

    Unlock_Tool.zip

  • Size

    49.9MB

  • Sample

    241116-r3d8daybme

  • MD5

    57f471e4ee9e74cc507e80d09defaeb0

  • SHA1

    35ec87607eec08fec81fdda22eda54da246d22c1

  • SHA256

    b687de1924f7805b57a1b528ed804d6d2f5e2e3f8058ab904fe0983a9d6a2a36

  • SHA512

    2e92116f096c917675abdad2d5a78949141275d03df2a08d47d71c43c3896bbf65690ae19faecc860eae1926879bd7dc27b4342e7e71177cc202f94b8292cb32

  • SSDEEP

    1572864:dHRk6MsvlqSOFhI63C6w1TMZmm+sIoE435lp4kJri:dVnlxkr3URo+gN5Akw

Malware Config

Targets

    • Target

      Unlock_Tool_v2.6.4.rar

    • Size

      49.9MB

    • MD5

      b1a7540cd12701261738fd879efb2779

    • SHA1

      1b3ad97b572045c61003de254d7833cab2391ee8

    • SHA256

      69289808086eba703c638e42fa8f2adbe274b98ec0e3d005b62560e42a9200f0

    • SHA512

      2a5ffac6840e56a2388f16cbbb737789482108fd77658467d55bcbcd49bcc3a13e942b073951cb3470f2cb42495e41b84404bedb2d4d8da33c9313e2fd944e44

    • SSDEEP

      1572864:5HRk6MsvlqSOFhI63C6w1TMZmm+sIoE435lp4kJr2:BVnlxkr3URo+gN5Aks

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks