General

  • Target

    HardMode.exe

  • Size

    50KB

  • Sample

    241120-e6nj1a1bjc

  • MD5

    4883052af73e0ae4b2a9239dfdb99ba7

  • SHA1

    d09b6a95681b190371f148bafa7cc56139d594fa

  • SHA256

    31d95dc13fca3cf8126076f7ad1c2bc4ed1501904fd453e0d1b6799d2e4a21e5

  • SHA512

    269aa3ca48ba57cb7bd832d3b1a986b2274fe4eb3e4572fdf7642abf37445088167c6c2c7b3b4b0c85a0d86107efb3529bd33e1d7c73f5813a082de50a0664de

  • SSDEEP

    768:ofTxeRF5Qg/yevIRh03nrtAGG+CHnufZ/4ilHRrlsSmOg+zd:ITwbP/RIvCnrtvG+CHumiloOt

Score
8/10

Malware Config

Targets

    • Target

      HardMode.exe

    • Size

      50KB

    • MD5

      4883052af73e0ae4b2a9239dfdb99ba7

    • SHA1

      d09b6a95681b190371f148bafa7cc56139d594fa

    • SHA256

      31d95dc13fca3cf8126076f7ad1c2bc4ed1501904fd453e0d1b6799d2e4a21e5

    • SHA512

      269aa3ca48ba57cb7bd832d3b1a986b2274fe4eb3e4572fdf7642abf37445088167c6c2c7b3b4b0c85a0d86107efb3529bd33e1d7c73f5813a082de50a0664de

    • SSDEEP

      768:ofTxeRF5Qg/yevIRh03nrtAGG+CHnufZ/4ilHRrlsSmOg+zd:ITwbP/RIvCnrtvG+CHumiloOt

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks