General

  • Target

    4732d4d1298ae81786a2006716e5f2e5c7b33f748302ba1c697b9c7741339915.exe

  • Size

    101KB

  • Sample

    241117-hcj69ssqc1

  • MD5

    292aac0d7d9f3da4d2760ff7d0aa8736

  • SHA1

    a75d93c71bb594499d976d846b3fee3f700e59b5

  • SHA256

    4732d4d1298ae81786a2006716e5f2e5c7b33f748302ba1c697b9c7741339915

  • SHA512

    fcf282834aeff15954b63a9c174c3db939b4c0d1627e00df9abd287c45f7db3b9671b1f0b3e7f0309ca6aa7299914acd1e63f3cb11ae2b874b5ee65ed86c7aa6

  • SSDEEP

    1536:0GYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7Tl:0fU/WF6QMauSuiWNi9CO+WARJrWNZj

Malware Config

Targets

    • Target

      4732d4d1298ae81786a2006716e5f2e5c7b33f748302ba1c697b9c7741339915.exe

    • Size

      101KB

    • MD5

      292aac0d7d9f3da4d2760ff7d0aa8736

    • SHA1

      a75d93c71bb594499d976d846b3fee3f700e59b5

    • SHA256

      4732d4d1298ae81786a2006716e5f2e5c7b33f748302ba1c697b9c7741339915

    • SHA512

      fcf282834aeff15954b63a9c174c3db939b4c0d1627e00df9abd287c45f7db3b9671b1f0b3e7f0309ca6aa7299914acd1e63f3cb11ae2b874b5ee65ed86c7aa6

    • SSDEEP

      1536:0GYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7Tl:0fU/WF6QMauSuiWNi9CO+WARJrWNZj

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks