Resubmissions

19-11-2024 03:54

241119-egbh5s1apq 7

10-12-2023 17:01

231210-vj2fcagecl 10

General

  • Target

    r2modman-3.1.45.exe

  • Size

    77.0MB

  • Sample

    241119-egbh5s1apq

  • MD5

    1444b0a413b5a950bcdb41069dba15f5

  • SHA1

    01dce10bfbba8d196237e577ca7ac80ff7bdef3a

  • SHA256

    38489bae8a9c1bfa391f1c71f3b132ffbea81a8c70189bbf0c842c49dff3fd48

  • SHA512

    6d59e4044e25b445651dda9c6613329d9b858da6f78ac367483ff7c18f9380268011d90d189d1707a23497c86a208a940b9d3955503043ca26ba05905b7b016d

  • SSDEEP

    1572864:+JkWM9n4eDJDdaliSFfsgYu3mSvkHBwwjoBStIT7LMaOgZl7:GP0dDja4SFf6u/x1MST7oaNZl7

Score
7/10

Malware Config

Targets

    • Target

      r2modman-3.1.45.exe

    • Size

      77.0MB

    • MD5

      1444b0a413b5a950bcdb41069dba15f5

    • SHA1

      01dce10bfbba8d196237e577ca7ac80ff7bdef3a

    • SHA256

      38489bae8a9c1bfa391f1c71f3b132ffbea81a8c70189bbf0c842c49dff3fd48

    • SHA512

      6d59e4044e25b445651dda9c6613329d9b858da6f78ac367483ff7c18f9380268011d90d189d1707a23497c86a208a940b9d3955503043ca26ba05905b7b016d

    • SSDEEP

      1572864:+JkWM9n4eDJDdaliSFfsgYu3mSvkHBwwjoBStIT7LMaOgZl7:GP0dDja4SFf6u/x1MST7oaNZl7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks