General

  • Target

    0bdcaf58ded3f689ec926ec920952de1a85d875bf41ea9e4ab3403a156b7ec45N.exe

  • Size

    59KB

  • Sample

    241117-jdkd4atpbs

  • MD5

    fc60fede5a07ef653d87e3edf0784f20

  • SHA1

    b2cfeed23919f78e821cd290f0f9609b00fe9871

  • SHA256

    0bdcaf58ded3f689ec926ec920952de1a85d875bf41ea9e4ab3403a156b7ec45

  • SHA512

    42d43d791f4cf2cf9e89faadb6dd0f6f5d600bb5fdb3ae9547a3de58f473f86f5a1a824eae0732e65d59d91cf95576694502b60ce8000049b7165e70c3a61425

  • SSDEEP

    1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQA:OeodiUO4p13b9HiIeoutuh1aQA

Malware Config

Targets

    • Target

      0bdcaf58ded3f689ec926ec920952de1a85d875bf41ea9e4ab3403a156b7ec45N.exe

    • Size

      59KB

    • MD5

      fc60fede5a07ef653d87e3edf0784f20

    • SHA1

      b2cfeed23919f78e821cd290f0f9609b00fe9871

    • SHA256

      0bdcaf58ded3f689ec926ec920952de1a85d875bf41ea9e4ab3403a156b7ec45

    • SHA512

      42d43d791f4cf2cf9e89faadb6dd0f6f5d600bb5fdb3ae9547a3de58f473f86f5a1a824eae0732e65d59d91cf95576694502b60ce8000049b7165e70c3a61425

    • SSDEEP

      1536:3+ZgwRdiE8cO4p1xRjfTvSq5r3ZiIZ4nouy8uh1aQA:OeodiUO4p13b9HiIeoutuh1aQA

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks