Overview

overview

7

Static

static

3

PPT for Br...tx.lnk

windows10-ltsc_2021-x64

7

PPT for Br...tx.lnk

windows11-21h2-x64

7

PPT for Br...tx.lnk

windows10-ltsc_2021-x64

7

PPT for Br...tx.lnk

windows11-21h2-x64

3

PPT for Br...el.exe

windows10-ltsc_2021-x64

1

PPT for Br...el.exe

windows11-21h2-x64

1

PPT for Br...el.bat

windows10-ltsc_2021-x64

3

PPT for Br...el.bat

windows11-21h2-x64

3

PPT for Br...m.pptx

windows10-ltsc_2021-x64

1

PPT for Br...m.pptx

windows11-21h2-x64

1

PPT for Br...ce.bat

windows10-ltsc_2021-x64

3

PPT for Br...ce.bat

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    PPT for Breifing at HQ Norther Command.zip
  • Size 9.4MB
  • Sample260629-fb13aads9t
  • SHA256 a9600cfc69d4960d2c7be6fe24203f30a3d945ba638b402efe843e56e7a8805c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Targets

    • Target
      PPT for Breifing at HQ Norther Command/PPT for Breifing at HQ Norther Command.pptx.lnk
    • Size 2KB
    • SHA256 3063285af5c7586ad04178c52b55da2bc1970cb7ae4fadba2195ad4a3fb8ac50
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2
    • Target
      PPT for Breifing at HQ Norther Command/excel/PPT for Breifing at HQ Norther Command.pptx.lnk
    • Size 2KB
    • SHA256 1d68ae4327efaae00af169c6b4baf46bc262fe79cc99e290f97dfa812a6dfad2
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4
    • Target
      PPT for Breifing at HQ Norther Command/excel/excel
    • Size 25.5MB
    • SHA256 abfac8026d1974220871568caf9344cbffed19a184ff098c0912ffbb4f1e42d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      PPT for Breifing at HQ Norther Command/excel/excel.bat
    • Size 373B
    • SHA256 befcffc4494e71f0efa03db4b3cfb71f72eab2ee9b406e867569062f238d4c3b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      PPT for Breifing at HQ Norther Command/excel/excelm
    • Size 9.2MB
    • SHA256 853ed3a26188e4cd89db50ebf50dd0c7b9392c056f637ba3af042c0156877a65
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      PPT for Breifing at HQ Norther Command/excel/office.bat
    • Size 313B
    • SHA256 751aba47221f97a8eb44dd137213cb1039e80d08ddc7ae059836ff3fb49fea8e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks