General

  • Target

    d4afaeae9ab5b695d72cfc12ce932b6cbb1b0b35f1c3e2a948285f6bdb443ab4N.exe

  • Size

    32KB

  • Sample

    241117-jxg33szjfn

  • MD5

    66aa3e21981c1d5e95c18e92dbeae7a0

  • SHA1

    c9c0e98c8051ccf67de8337860591c7f05fb62b9

  • SHA256

    d4afaeae9ab5b695d72cfc12ce932b6cbb1b0b35f1c3e2a948285f6bdb443ab4

  • SHA512

    f578087ae141c546803162462835af1d93aa4e84a55e712ed52c3ac5e7134f25b24dbc2f0a0fd765dbf3e0e94409a631d96b6f88116ad4260290f9a3652c175b

  • SSDEEP

    768:+LahIdmVIBW+3vH915oB19mPHXRHrMWNCSGcdH8zevc:+ehIdmVIBW+fHSB19CR55+Cvc

Malware Config

Targets

    • Target

      d4afaeae9ab5b695d72cfc12ce932b6cbb1b0b35f1c3e2a948285f6bdb443ab4N.exe

    • Size

      32KB

    • MD5

      66aa3e21981c1d5e95c18e92dbeae7a0

    • SHA1

      c9c0e98c8051ccf67de8337860591c7f05fb62b9

    • SHA256

      d4afaeae9ab5b695d72cfc12ce932b6cbb1b0b35f1c3e2a948285f6bdb443ab4

    • SHA512

      f578087ae141c546803162462835af1d93aa4e84a55e712ed52c3ac5e7134f25b24dbc2f0a0fd765dbf3e0e94409a631d96b6f88116ad4260290f9a3652c175b

    • SSDEEP

      768:+LahIdmVIBW+3vH915oB19mPHXRHrMWNCSGcdH8zevc:+ehIdmVIBW+fHSB19CR55+Cvc

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks