General

  • Target

    ai albino gibbon.jpg

  • Size

    131KB

  • Sample

    241130-cwr4bssjgp

  • MD5

    1daca97f96c77c8155a91a1339dccd45

  • SHA1

    17037aa6917efbac6dd84ff99d92000fe4deea9a

  • SHA256

    f8acbf5c8af2b42ddc15c2ee315a4ee4a9be691b0425e0c1ef4c5aecd6728b49

  • SHA512

    ef1ce896efffa88d45443e6095997c9a1bd4726d6fd15c02c0002360f249a7d768cadc554342c09197a757c0ed2bae3cf1e0ad97dcd3aaf1d3ba71344eb70be5

  • SSDEEP

    3072:a4e0soaovyoQfrkYcRCdnSeMHop7OnbtEXZChi59:az0soaovvQj/cAVSeFhytI9

Malware Config

Targets

    • Target

      ai albino gibbon.jpg

    • Size

      131KB

    • MD5

      1daca97f96c77c8155a91a1339dccd45

    • SHA1

      17037aa6917efbac6dd84ff99d92000fe4deea9a

    • SHA256

      f8acbf5c8af2b42ddc15c2ee315a4ee4a9be691b0425e0c1ef4c5aecd6728b49

    • SHA512

      ef1ce896efffa88d45443e6095997c9a1bd4726d6fd15c02c0002360f249a7d768cadc554342c09197a757c0ed2bae3cf1e0ad97dcd3aaf1d3ba71344eb70be5

    • SSDEEP

      3072:a4e0soaovyoQfrkYcRCdnSeMHop7OnbtEXZChi59:az0soaovvQj/cAVSeFhytI9

    • A potential corporate email address has been identified in the URL: [email protected]

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks