General

  • Target

    2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe

  • Size

    56KB

  • Sample

    241122-jafazawpc1

  • MD5

    5d84a0d28bf422da4d26699050c71c96

  • SHA1

    9cec12b9238d41538f615179751b4b34fe2c8fe0

  • SHA256

    2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9

  • SHA512

    8f4767f6fde9fe65147309420c8c5949bc1c1e7d7e14a6d4194ce3401ad42720dbf66e797af68fce9839421e589c4ca9db46bca677c5c52cbdfc379231fba438

  • SSDEEP

    1536:SGgcXJQgnRt9UdLw6BNMyBhXZxHJ6P6D5bPt:Kgz07JjD5bPt

Malware Config

Targets

    • Target

      2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9.exe

    • Size

      56KB

    • MD5

      5d84a0d28bf422da4d26699050c71c96

    • SHA1

      9cec12b9238d41538f615179751b4b34fe2c8fe0

    • SHA256

      2d412693f0dc8e31a118d87547a2aef7ba009d1ffa729cc2dd1ac54b060eece9

    • SHA512

      8f4767f6fde9fe65147309420c8c5949bc1c1e7d7e14a6d4194ce3401ad42720dbf66e797af68fce9839421e589c4ca9db46bca677c5c52cbdfc379231fba438

    • SSDEEP

      1536:SGgcXJQgnRt9UdLw6BNMyBhXZxHJ6P6D5bPt:Kgz07JjD5bPt

    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks