General

  • Target

    e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4aN.exe

  • Size

    137KB

  • Sample

    241117-lhsx5swlht

  • MD5

    a7559ff8dbc7d7d65d11f8a98df582f0

  • SHA1

    7abe85b1abbc907ae0466bf2b9e9321ed310fede

  • SHA256

    e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4a

  • SHA512

    f8a9e2d14cfae37dd2179dcde4649384f6006ea2223df771797e3757a4391269b529a64f6f2dee9e319db8acb95f8108365aee99a9c7df29fbef31f3945445d5

  • SSDEEP

    3072:S1i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU8T:Mi/NjO5x0Xg+UGSYnuy3Oai/Nr

Malware Config

Targets

    • Target

      e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4aN.exe

    • Size

      137KB

    • MD5

      a7559ff8dbc7d7d65d11f8a98df582f0

    • SHA1

      7abe85b1abbc907ae0466bf2b9e9321ed310fede

    • SHA256

      e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4a

    • SHA512

      f8a9e2d14cfae37dd2179dcde4649384f6006ea2223df771797e3757a4391269b529a64f6f2dee9e319db8acb95f8108365aee99a9c7df29fbef31f3945445d5

    • SSDEEP

      3072:S1i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU8T:Mi/NjO5x0Xg+UGSYnuy3Oai/Nr

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Enterprise v15

Tasks