General

  • Target

    d73a9c02f35654cd67ba66dc42fc18d76ec6b16ccc24528acb19e00d8df2327d.exe

  • Size

    232KB

  • Sample

    241117-ktt4xawdph

  • MD5

    1455a78c2b128b20e1c544538f0a4685

  • SHA1

    62b8f5688fbf1ff3cef6f20687e27acdaa22888c

  • SHA256

    d73a9c02f35654cd67ba66dc42fc18d76ec6b16ccc24528acb19e00d8df2327d

  • SHA512

    3d85c065fc28727d1b62ad0624c4be12eec602856b5938e4296f17fd1952d9e9c2327f23e8a05b2d91b8201903648f882b5c9338cde048ee8605f58031dd73af

  • SSDEEP

    3072:kI1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgO5s1i/NU82OMYcYYamv5by:Xi/NjO5YBgegD0PHzSni/N+O71

Malware Config

Targets

    • Target

      d73a9c02f35654cd67ba66dc42fc18d76ec6b16ccc24528acb19e00d8df2327d.exe

    • Size

      232KB

    • MD5

      1455a78c2b128b20e1c544538f0a4685

    • SHA1

      62b8f5688fbf1ff3cef6f20687e27acdaa22888c

    • SHA256

      d73a9c02f35654cd67ba66dc42fc18d76ec6b16ccc24528acb19e00d8df2327d

    • SHA512

      3d85c065fc28727d1b62ad0624c4be12eec602856b5938e4296f17fd1952d9e9c2327f23e8a05b2d91b8201903648f882b5c9338cde048ee8605f58031dd73af

    • SSDEEP

      3072:kI1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgO5s1i/NU82OMYcYYamv5by:Xi/NjO5YBgegD0PHzSni/N+O71

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks